← Back to browse · API

CVE-2024-4620

Severity
CRITICAL
CVSS
9.8
EPSS
0.03345
Risk score
40.37
CISA KEV
No
PoC
No
Published
2024-06-07
Modified
2024-08-01
First seen
2026-08-08
Aliases
EUVD-2024-44228, GHSA-3444-VGQG-W2GC
Products
Unknown:ARForms - Premium WordPress Form Builder Plugin 0 <6.6
Sources
euvd EUVD-2024-44228

Description

The ARForms - Premium WordPress Form Builder Plugin WordPress plugin before 6.6 allows unauthenticated users to modify uploaded files in such a way that PHP code can be uploaded when an upload file input is included on a form

References