Published: 09/08/2021 Updated: 12/06/2023

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

The Workreap WordPress theme prior to 2.2.2 AJAX actions workreap_award_temp_file_uploader and workreap_temp_file_uploader did not perform nonce checks, or validate that the request is from a valid user in any other way. The endpoints allowed for uploading arbitrary files to the uploads/workreap-temp directory. Uploaded files were neither sanitized nor validated, allowing an unauthenticated visitor to upload executable code such as php scripts.

Vulnerable Product	Search on Vulmon	Subscribe to Product
amentotech workreap

WordPress theme Workreap version 222 suffers from a remote shell upload vulnerabilities ...

Python Exploit Unauthenticated Upload Leading to Remote Code Execution

Exploit-for-WordPress-Theme-Workreap-222 Python Exploit Unauthenticated Upload Leading to Remote Code Execution CVE-2021-24499 The Workreap WordPress theme before 222 AJAX actions workreap_award_temp_file_uploader and workreap_temp_file_uploader did not perform nonce checks, or validate that the request is from a valid user in any other way The endpoints allowed for upload

CVE-2021-24499 Mass exploitation of CVE-2021-24499 unauthenticated upload leading to remote code execution in Workreap theme The AJAX actions workreap_award_temp_file_uploader and workreap_temp_file_uploader did not perform nonce checks, or validate that the request is from a valid user in any other way The endpoints allowed for uploading arbitrary files to the uploads/workre

Mass exploitation of CVE-2021-24499 unauthenticated upload leading to remote code execution in Workreap theme.

CVE-2021-24499 Mass exploitation of CVE-2021-24499 unauthenticated upload leading to remote code execution in Workreap theme The AJAX actions workreap_award_temp_file_uploader and workreap_temp_file_uploader did not perform nonce checks, or validate that the request is from a valid user in any other way The endpoints allowed for uploading arbitrary files to the uploads/workre

CWE-434 https://wpscan.com/vulnerability/74611d5f-afba-42ae-bc19-777cdf2808cb https://jetpack.com/2021/07/07/multiple-vulnerabilities-in-workreap-theme/http://packetstormsecurity.com/files/172876/WordPress-Workreap-2.2.2-Shell-Upload.html https://nvd.nist.gov https://github.com/buka-pitch/Exploit-for-WordPress-Theme-Workreap-2.2.2 https://packetstormsecurity.com/files/172876/WordPress-Workreap-2.2.2-Shell-Upload.html

CVE-2021-24499

Vulnerability Summary

Vulnerability Trend

Exploits

Github Repositories

References

Vulmon Search

About

Products

Connect