Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

1 record

Vendor: tumultinc Clear all filters
TI-2024-10268 CVE-2024-11082 · GHSA-r5gw-2hvf-hr4w

Tumult Hype Animations <= 1.9.15 - Authenticated (Author+) Arbitrary File Upload via hypeanimations_panel Function

Priority MEDIUM 45

The Tumult Hype Animations plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the hypeanimations_panel() function in all versions up to, and including, 1.9.15.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01197 Published 2024-11-28 No fix listed CWE-434