← Back to CVE List
CVE-2021-24311
The wp_ajax_upload-remote-file AJAX action of the External Media WordPress plugin before 1.0.34 was vulnerable to arbitrary file uploads via any authenticated users.
> MITRE Terms of Use apply – see LICENSE‑MITRE.txt