High severity8.8NVD Advisory· Published Apr 12, 2021· Updated Jun 17, 2026
CVE-2021-24224
CVE-2021-24224
Description
The EFBP_verify_upload_file AJAX action of the Easy Form Builder WordPress plugin through 1.0, available to authenticated users, does not have any security in place to verify uploaded files, allowing low privilege users to upload arbitrary files, leading to RCE.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- WordPress/Easy Form Builderdescription
- Range: <=1.0
Patches
Vulnerability mechanics
References
2- github.com/jinhuang1102/CVE-ID-Reports/blob/e4c33529b20fa70e3a764ff9b1125839fb9900b5/Easy%20Form%20Builder.mdnvdExploitThird Party Advisory
- wpscan.com/vulnerability/ed0c054b-54bf-4df8-9015-c76704c93484nvdThird Party Advisory
News mentions
0No linked articles in our index yet.