tumult/hype-wordpress-plugin

Releases11

Frequency6 months 2 weeks

Last Release 28 days ago

Stars11

Wordpress Plugin for Tumult Hype Animations

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2024-11082 ↗	Nov 28, 2024Thursday, 28 November 2024, 10:15	9.9 CRITICAL	—
The Tumult Hype Animations plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the hypeanimations_panel() function in all versions up to, and including, 1.9.15. This makes it possible for authenticated attackers, with Author-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible.