Critical · 9.9 CVE-2024-50480 EUVD-2024-44906GHSA-p59h-wx3h-mv3h

WordPress Marketing Automation by AZEXO plugin <= 1.27.80 - Arbitrary File Upload vulnerability

Published Oct 29, 2024 · Updated May 12, 2026 · Assigned by Patchstack

Vendor: azexo Product: Marketing Automation by AZEXO

Description

Unrestricted Upload of File with Dangerous Type vulnerability in azexo Marketing Automation by AZEXO marketing-automation-by-azexo allows Upload a Web Shell to a Web Server.This issue affects Marketing Automation by AZEXO: from n/a through <= 1.27.80.

Affected products

Vendor	Product	Affected	Fixed
azexo	Marketing Automation by AZEXO	≤ 1.27.80	—

References

https://patchstack.com/database/Wordpress/Plugin/marketing-automation-by-azexo/vulnerability/wordpress-marketing-automation-by-azexo-plugin-1-27-80-arbitrary-file-upload-vulnerability?_s_id=cve vdb-entry