Critical severity9.8NVD Advisory· Published Jun 8, 2026· Updated Jun 8, 2026

CVE-2024-58349

Description

WordPress Theme Travelscape 1.0.3 contains an arbitrary file upload vulnerability that allows unauthenticated attackers to upload malicious files by exploiting insufficient validation in the theme's upload functionality. Attackers can upload arbitrary files to the theme directory and execute them to achieve remote code execution on the affected WordPress installation.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Travelscapeinferred2 versions
=1.0.3+ 1 more
- (no CPE)range: =1.0.3
- (no CPE)range: <=1.0.3
Package: https://wordpress.org/themes/travelscape

Patches

Vulnerability mechanics

References

www.exploit-db.com/exploits/51969nvd
www.vulncheck.com/advisories/wordpress-theme-travelscape-arbitrary-file-uploadnvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000