← Back

Wp Curriculo Vitae Free

wp-curriculo_vitae_free

Vendor: Williamluis • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-24222
1Williamluis
1Wp Curriculo Vitae Free
Jun 17, 2026
Apr 12, 2021
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
The WP-Curriculo Vitae Free WordPress plugin through 6.3 suffers from an arbitrary file upload issue in page where the [formCadastro] is embed. The form allows unauthenticated user to register and submit files for their...Show more
The WP-Curriculo Vitae Free WordPress plugin through 6.3 suffers from an arbitrary file upload issue in page where the [formCadastro] is embed. The form allows unauthenticated user to register and submit files for their profile picture as well as resume, without any file extension restriction, leading to RCE.Show less