Vulnerabilities > Aivahthemes

DATE CVE VULNERABILITY TITLE RISK
2021-04-22 CVE-2021-24240 Unrestricted Upload of File with Dangerous Type vulnerability in Aivahthemes Business Hours PRO 5.5.0
The Business Hours Pro WordPress plugin through 5.5.0 allows a remote attacker to upload arbitrary files using its manual update functionality, leading to an unauthenticated remote code execution vulnerability.
network
low complexity
aivahthemes CWE-434
critical
9.8