WordPress Hash Form Plugin Remote Code Execution - CVE-2024-5084

 This script demonstrates the exploitation of CVE-2024-5084, a vulnerability in the Hash Form plugin for WordPress, which allows unauthenticated arbitrary file upload leading to remote code execution.

Vulnerability Details

  • Name: CVE-2024-5084
  • Description: Unauthenticated Arbitrary File Upload to Remote Code Execution.
  • Affected Plugin: Hash Form – Drag & Drop Form Builder <= 1.1.0
  • SourceWordfence - Vulnerability Details





Post a Comment

Previous Post Next Post