PT-2020-15645 · Gvectors · Wpdiscuz

Published 2020-08-24 · Updated 2025-12-23 · CVE-2020-24186

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions gVectors wpDiscuz plugin versions 7.0 through 7.0.4

Description A Remote Code Execution issue exists, allowing unauthenticated users to upload any type of file, including PHP files, via the wmuUploadFiles AJAX action.

Recommendations For versions 7.0 through 7.0.4, update to a version outside of this range to resolve the issue. As a temporary workaround, consider restricting access to the wmuUploadFiles AJAX action to prevent unauthenticated file uploads.

Exploit

Fix

RCE

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2020-24186

Affected Products

Wpdiscuz

References · 17

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/wp_wpdiscuz_unauthenticated_file_upload.rb · Exploit
• 🔥 https://github.com/hev0x/CVE-2020-24186-wpDiscuz-7.0.4-RCE · Exploit
• 🔥 https://github.com/hev0x/CVE-2020-24186-WordPress-wpDiscuz-7.0.4-RCE · Exploit
• 🔥 https://github.com/h3v0x/CVE-2020-24186-WordPress-wpDiscuz-7.0.4-RCE · Exploit
• 🔥 https://github.com/substing/CVE-2020-24186_reverse_shell_upload · Exploit
• 🔥 https://github.com/Sakura-501/CVE-2020-24186-exploit · Exploit
• 🔥 http://packetstormsecurity.com/files/163012/WordPress-wpDiscuz-7.0.4-Remote-Code-Execution.html · Exploit
• 🔥 https://wordfence.com/blog/2020/07/critical-arbitrary-file-upload-vulnerability-patched-in-wpdiscuz-plugin · Exploit
• 🔥 https://exploit-db.com/exploits/49967 · Exploit
• 🔥 https://exploit-db.com/exploits/49962 · Exploit
• 🔥 http://packetstormsecurity.com/files/163302/WordPress-wpDiscuz-7.0.4-Shell-Upload.html · Exploit
• 🔥 http://packetstormsecurity.com/files/162983/WordPress-wpDiscuz-7.0.4-Shell-Upload.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-24186 · Security Note
• https://osv.dev/vulnerability/CVE-2020-24186 · Vendor Advisory
• https://t.me/cybersecuritytechnologies/9637 · Telegram Post