Skip to content
Threat Feed
Subscribe

Product

ACF City Selector (<= 1.14.0)

1 brief RSS
low advisory

ACF City Selector: Arbitrary file upload remote code execution (CVE-2024-56264)

An arbitrary file upload vulnerability in the WordPress ACF City Selector plugin (<= 1.14.0) allows an authenticated administrator to achieve remote code execution by uploading a malicious PHP shell.

ACF City Selector wordpress web-shell rce file-upload
1r 2t 1c