CVE-2021-24248

The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.1 did not properly check for imported files, forbidding certain extension via a blacklist approach, allowing administrator to import an archive with a .php4 inside for example, leading to RCE

Date published : 2021-05-05

https://wpscan.com/vulnerability/ca886a34-cd2b-4032-9de1-8089b5cf3001