← All advisories

Critical severity10.0NVD Advisory· Published Feb 26, 2024· Updated Apr 28, 2026

CVE-2024-25913

CVE-2024-25913

Description

Unrestricted Upload of File with Dangerous Type vulnerability in Skymoonlabs MoveTo.This issue affects MoveTo: from n/a through 6.2.

Affected products

2

Skymoonlabs/Moveto
cpe:2.3:a:skymoonlabs:moveto:*:*:*:*:*:*:*:*
Range: <=6.2
WordPress/Movetollm-fuzzy
Range: <=6.2
Package: https://wordpress.org/plugins/moveto

Patches

Vulnerability mechanics

References

1

patchstack.com/database/vulnerability/moveto/wordpress-moveto-plugin-6-2-unauthenticated-arbitrary-file-upload-vulnerabilitynvdThird Party Advisory

News mentions

0

No linked articles in our index yet.