CVE-2024-25909

Severity

CRITICAL

CVSS

9.9

EPSS

0.00643

Risk score

39.83

CISA KEV

PoC

Published

2024-02-26

Modified

2026-04-28

First seen

2026-08-07

Aliases

EUVD-2024-23211, GHSA-246P-56FR-J339

Products

JoomUnited:WP Media folder n/a ≤5.7.2

Sources

euvd EUVD-2024-23211

Description

Unrestricted Upload of File with Dangerous Type vulnerability in JoomUnited WP Media folder.This issue affects WP Media folder: from n/a through 5.7.2.

References

https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-23211
https://patchstack.com/database/vulnerability/wp-media-folder/wordpress-wp-media-folder-plugin-5-7-2-subscriber-arbitrary-file-upload-vulnerability?_s_id=cve