WordPress security by component

Default Thumbnail Plus

Plugin description

Default Thumbnail Plus is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Jul 09, 2024; the highest CVE/CNA score is 8.8.

Plugin slug: default-thumbnail-plus

Latest vulnerability

CVE-2024-6161: Default Thumbnail Plus: Dangerous file upload

Default Thumbnail Plus is affected by dangerous file upload. Exploitation requires an authenticated WordPress account. Successful exploitation can place attacker-controlled executable content on the server and may lead to full site compromise.

PublishedJul 09, 2024

Safe version guidanceSee mitigation notes

		Safe version
Jul 09, 2024	CVE-2024-6161 Default Thumbnail Plus: Dangerous file upload Default Thumbnail Plus is affected by dangerous file upload. Exploitation requires an authenticated WordPress account. Successful exploitation can place attacker-controlled executable content on the server and may lead to full site compromise.	See mitigation notes	CVE8.8 NVDPending