Description
The Directorist WordPress plugin before 7.0.6.2 was vulnerable to Cross-Site Request Forgery to Remote File Upload leading to arbitrary PHP shell uploads in the wp-content/plugins directory.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Directorist – Business Directory Plugin | 7.0.6.2 – < 7.0.6.2 | 7.0.6.2 |
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- Directorist < 7.0.6.2 - Cross-Site Request Forgery to Arbitrary File Upload http/cves/2021/CVE-2021-24981.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.