← العودة للجدول
CVE-2024-58349
CVE-2024-58349 — WordPress Theme Travelscape 1.0.3 contains an arbitrary file upload vulnerabilit
📅 2026-06-07
🔴 Critical 🔥 No NVD Exploit Web CVSS 9.8

📋 الوصف الكامل

WordPress Theme Travelscape 1.0.3 contains an arbitrary file upload vulnerability that allows unauthenticated attackers to upload malicious files by exploiting insufficient validation in the theme's upload functionality. Attackers can upload arbitrary files to the theme directory and execute them to achieve remote code execution on the affected WordPress installation.

💻 الأنظمة المتأثرة

WordPress

⚠️ نوع التهديد

Exploit

🔗 CVE ID

CVE-2024-58349

📡 المصدر

NVD

✅ الحلول والتخفيف

Refer to CVE-2024-58349 NVD advisory

🔗 المصدر الأصلي ← 📘 NVD ← ⚡ CISA KEV ←