CVE-2024-9422 — MEDIUM (6.6)

Q: How severe is CVE-2024-9422?

CVE-2024-9422 has been rated MEDIUM with a CVSS base score of 6.6/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2024-9422?

Check the references section above for vendor advisories and patch information. Affected products include: Geomywp Geo My Wordpress, Geomywp Geo My Wordpress Premium Settings.

Vulnerability Description

The GEO my WP WordPress plugin before 4.5, gmw-premium-settings WordPress plugin before 3.1 does not sufficiently validate files to be uploaded, which could allow attackers to upload arbitrary files such as PHP on the server.

CVSS Score

6.6

MEDIUM

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Geomywp	Geo My Wordpress	< 4.5
Geomywp	Geo My Wordpress Premium Settings	< 3.1

References

https://wpscan.com/vulnerability/81320923-767c-43f0-a8eb-b398c306c16f/ExploitThird Party Advisory

FAQ

What is CVE-2024-9422?

CVE-2024-9422 is a vulnerability with a CVSS score of 6.6 (MEDIUM). The GEO my WP WordPress plugin before 4.5, gmw-premium-settings WordPress plugin before 3.1 does not sufficiently validate files to be uploaded, which could allow attackers to upload arbitrary files s...

How severe is CVE-2024-9422?

CVE-2024-9422 has been rated MEDIUM with a CVSS base score of 6.6/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-9422?

Check the references section above for vendor advisories and patch information. Affected products include: Geomywp Geo My Wordpress, Geomywp Geo My Wordpress Premium Settings.