Aivahthemes Business Hours Pro vulnerabilities

1 vulnerability

Known vulnerabilities in Aivahthemes Business Hours Pro, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CriticalCVE-2021-24240aivahthemes · business_hours_pro +2 moreBusiness Hours Pro <= 5.5.0 - Unauthenticated Arbitrary File Upload to RCEThe Business Hours Pro WordPress plugin through 5.5.0 allows a remote attacker to upload arbitrary files using its manual update functionality, leading to an unauthenticated remote code execution vulnerability.EPSS3.04%