Remote Code Execution Vulnerability in gVectors wpDiscuz Plugin 7.0 through 7.0.4 for WordPress

CVE-2020-24186 · CRITICAL Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

A Remote Code Execution vulnerability exists in the gVectors wpDiscuz plugin 7.0 through 7.0.4 for WordPress, which allows unauthenticated users to upload any type of file, including PHP files via the wmuUploadFiles AJAX action.

Learn more about our Wordpress Pen Testing.