What is CVE-2014-5324?

CVE-2014-5324 is a vulnerability in Najeebmedia N-Media File Uploader, classified under Code Injection. Published 2014-09-26.

Is CVE-2014-5324 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

RCE in Najeebmedia N-Media File Uploader

CVE-2014-5324

Unrestricted file upload vulnerability in the N-Media file uploader plugin before 3.4 for WordPress allows remote authenticated users to execute arbitrary PHP code by leveraging Author privileges to store a file.

Vulnerability class: RCE (Remote Code Execution)

EPSS: 0.017 (75.4th percentile) — read the EPSS interpretation.

Affected products

Najeebmedia N-media_file_uploader — versions 3.0, 3.1, 3.2
N/a — versions n/a

Weakness classification (CWE)

CWE-94 — Code Injection

Public proof-of-concept exploits

20142995/nuclei-templates

References

vultures@jpcert.or.jp (x_refsource_JVN, third-party-advisory)
vultures@jpcert.or.jp (x_refsource_JVNDB, third-party-advisory)

Frequently asked questions

What is CVE-2014-5324?: CVE-2014-5324 is a vulnerability in Najeebmedia N-Media File Uploader, classified under Code Injection. Published 2014-09-26.
Is CVE-2014-5324 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.