VULNERABILITY INTELLIGENCE

CVE-2021-24248

CVSS score7.2 HIGH

EPSS probability1.58%

CISA KEVNot currently listed

Published2021-05-06

Last modified2026-06-17

Description

The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.1 did not properly check for imported files, forbidding certain extension via a blacklist approach, allowing administrator to import an archive with a .php4 inside for example, leading to RCE