Critical severity9.8NVD Advisory· Published May 6, 2021· Updated Jun 17, 2026
CVE-2021-24236
CVE-2021-24236
Description
The Imagements WordPress plugin through 1.2.5 allows images to be uploaded in comments, however only checks for the Content-Type in the request to forbid dangerous files. This allows unauthenticated attackers to upload arbitrary files by using a valid image Content-Type along with a PHP filename and code, leading to RCE.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: <=1.2.5
- williewonka/Imagementsv5Range: 1.2.5
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/8f24e74f-60e3-4100-9ab2-ec31b9c9cdeanvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.