WordPress security by component
WP REST API FNS
Plugin description
WP REST API FNS is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Oct 20, 2024; the highest CVE/CNA score is 10.
Plugin slug:
wp-rest-api-fnsLatest vulnerability
CVE-2024-49329: WP REST API FNS: Dangerous file upload
WP REST API FNS is affected by dangerous file upload. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can place attacker-controlled executable content on the server and may lead to full site compromise.
| Safe version |
|
||
|---|---|---|---|
| Oct 20, 2024 |
CVE-2024-49329
WP REST API FNS: Dangerous file upload
WP REST API FNS is affected by dangerous file upload. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can place attacker-controlled executable content on the server and may lead to full site compromise.
|
See mitigation notes |
CVE10.0
NVD9.8
|
| Oct 20, 2024 |
CVE-2024-49328
WP REST API FNS: Privilege escalation or authentication bypass
WP REST API FNS is affected by privilege escalation or authentication bypass. Exposure depends on how the affected operation is made reachable by the site. A successful request can grant permissions or access that the caller should not possess.
|
See mitigation notes |
CVE9.8
NVD9.8
|