« Volver al listado

CVE-2021-24161

Estado: ModificadaAlta (8.8)—

In the Reponsive Menu (free and Pro) WordPress plugins before 4.0.4, attackers could craft a request and trick an administrator into uploading a zip archive containing malicious PHP files. The attacker could then access those files to achieve remote code execution and further infect the targeted site.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Expresstech — Responsive Menu

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2021-24161",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 8.8,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "contact@wpscan.com",
      "affectedData": [
        {
          "vendor": "ExpressTech",
          "product": "Responsive Menu – Create Mobile-Friendly Menu",
          "versions": [
            {
              "status": "affected",
              "version": "4.0.4",
              "lessThan": "4.0.4",
              "versionType": "custom"
            }
          ]
        },
        {
          "vendor": "ExpressTech",
          "product": "Responsive Menu Pro",
          "versions": [
            {
              "status": "affected",
              "version": "4.0.4",
              "lessThan": "4.0.4",
              "versionType": "custom"
            }
          ]
        }
      ]
    }
  ],
  "published": "2021-04-05T19:15:15.170",
  "references": [
    {
      "url": "https://wpscan.com/vulnerability/efca27e0-bdb6-4497-8330-081f909d6933",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "contact@wpscan.com"
    },
    {
      "url": "https://www.wordfence.com/blog/2021/02/multiple-vulnerabilities-patched-in-responsive-menu-plugin/",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "source": "contact@wpscan.com"
    },
    {
      "url": "https://wpscan.com/vulnerability/efca27e0-bdb6-4497-8330-081f909d6933",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.wordfence.com/blog/2021/02/multiple-vulnerabilities-patched-in-responsive-menu-plugin/",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "contact@wpscan.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-352"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-352"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Reponsive Menu (free and Pro) WordPress plugins before 4.0.4, attackers could craft a request and trick an administrator into uploading a zip archive containing malicious PHP files. The attacker could then access those files to achieve remote code execution and further infect the targeted site."
    },
    {
      "lang": "es",
      "value": "En los plugins de WordPress Reponsive Menu (free y Pro) versiones anteriores a 4.0.4, unos atacantes podrían diseñar una petición y engañar a un administrador para que cargue un archivo zip que contenga archivos PHP maliciosos. El atacante podría entonces acceder a esos archivos para lograr una ejecución de código remota e infectar aún más el sitio objetivo"
    }
  ],
  "lastModified": "2026-06-17T03:39:29.883",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:expresstech:responsive_menu:*:*:*:*:free:wordpress:*:*",
              "vulnerable": true,
              "matchCriteriaId": "36CF966E-25C0-408C-A993-0FAF0AF9FC31",
              "versionEndExcluding": "4.0.4"
            },
            {
              "criteria": "cpe:2.3:a:expresstech:responsive_menu:*:*:*:*:pro:wordpress:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B045BC14-6B45-4707-B41C-D1447BBECE04",
              "versionEndExcluding": "4.0.4"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "contact@wpscan.com"
}