CVE-2021-24311

CVE-2021-24311: External Media < 1.0.34 - Authenticated Arbitrary File Upload

Vendor Unknown

Product External Media

Weakness CWE-434 · Unrestricted file upload

Published June 1, 2021

Last update August 3, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The wp_ajax_upload-remote-file AJAX action of the External Media WordPress plugin before 1.0.34 was vulnerable to arbitrary file uploads via any authenticated users.

Key dates

02Disclosure timeline

June 1, 2021 CVE published

August 3, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2021-24311 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/434.html

Related vulnerabilities

04Related CVE

CVE-2025-10427 SourceCodester Pet Grooming Management Software user.php unrestricted upload CVE-2025-22504 WordPress 4ECPS Web Forms Plugin <= 0.2.18 - Arbitrary File Upload vulnerability CVE-2025-7877 Metasoft 美特软件 MetaCRM sendfile.jsp unrestricted upload CVE-2024-10547 WP Membership <= 1.6.2 - Unauthenticated Arbitrary File Upload CVE-2024-8342 SourceCodester Petshop Management System add_client.php unrestricted upload