CVE-2024-50511 – WordPress WP donimedia carousel plugin <= 1.0.1 - Arbitrary File Upload vulnerability

https://notcve.org/view.php?id=CVE-2024-50511

28 Oct 2024 — Unrestricted Upload of File with Dangerous Type vulnerability in David DONISA WP donimedia carousel allows Upload a Web Shell to a Web Server.This issue affects WP donimedia carousel: from n/a through 1.0.1. Vulnerabilidad de carga sin restricciones de archivos con tipo peligroso en David DONISA WP donimedia carousel permite cargar un Web Shell a un servidor web. Este problema afecta a WP donimedia carousel: desde n/a hasta 1.0.1. The WP donimedia carousel plugin for WordPress is vulnerable to arbitrary fil... • https://patchstack.com/database/vulnerability/wp-donimedia-carousel/wordpress-wp-donimedia-carousel-plugin-1-0-1-arbitrary-file-upload-vulnerability?_s_id=cve • CWE-434: Unrestricted Upload of File with Dangerous Type •