TI-2024-22746 CVE-2024-34411 · GHSA-prmm-jjm7-hjjwWordPress canvasio3D Light plugin <= 2.5.0 - Arbitrary File Upload vulnerabilityPriority MEDIUM 50Unrestricted Upload of File with Dangerous Type vulnerability in Thomas Scholl canvasio3D Light.This issue affects canvasio3D Light: from n/a through 2.5.0.CVSS 3.1CRITICAL 9.9· Network · Low privileges · No interaction · EPSS 0.0082 · Published 2024-05-13 · No fix listed CWE-434