KEVIntel
9.8
CVSS
Critical

CVE-2024-8856

PUBLISHED

Backup and Staging by WP Time Capsule <= 1.22.21 - Unauthenticated Arbitrary File Upload

PoC available Remote Low complexity No user interaction
Vendor
revmakx
Product
Backup and Staging by WP Time Capsule
Published
Nov 16, 2024
EPSS

Description

The Backup and Staging by WP Time Capsule plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the the UploadHandler.php file and no direct file access prevention in all versions up to, and including, 1.22.21. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.

nuclei_scanner

CVSS scores

CVSS v3.1 9.8 Critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitation status

Proof of concept available

Recorded 2024-11-21 04:01:27 UTC · Source

SSVC decision points

Exploitation
none
Automatable
Yes
Technical impact
total

Known exploited vulnerability sources

Catalogues that list this CVE as a known exploited vulnerability.

Source Added
The Shadowserver (via CIRCL) Jun 26, 2025

Potential proof of concepts

These PoCs are unverified and could contain malware. Use at your own risk.

wp_time_capsule_file_upload_rce

metasploit · Created Unknown

Metasploit module for CVE-2024-8856

Jenderal92/CVE-2024-8856

github · Created 2024-11-21 04:01:27 UTC · 2 stars

This tool scans WordPress websites for vulnerabilities in the WP Time Capsule plugin related to CVE-2024-8856. It identifies plugin versions below 1.22.22 as vulnerable and logs results to vuln.txt. Simple and efficient, it helps security researchers and admins detect and address risks quickly.

ubaydev/CVE-2024-8856

github · Created 2024-11-16 20:04:11 UTC · 2 stars

WordPress WP Time Capsule Plugin Arbitrary File Upload Vulnerability

Timeline

  • CVE ID Reserved

  • CVE Published to Public

  • Proof of Concept Exploit Available

  • Detected by Nuclei

  • Detected by Metasploit

  • Added to KEVIntel