Every CVE Search/ Get API key

CVE-2017-6104

Remote file upload vulnerability in Wordpress Plugin Mobile App Native 3.0.

7.5 HighPublic exploit

Remote file upload vulnerability in Wordpress Plugin Mobile App Native 3.0.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
High
Availability
None

Exploit likelihood

7.32%Up 1.7 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 7.5

Remote file upload vulnerability in Wordpress Plugin Mobile App Native 3.0.

Record
CVE-2017-6104
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:P/A:N
Weakness
CWE-287, CWE-434, CWE-732
Updated
2026-11-02
CVE List No score

Remote file upload vulnerability in Wordpress Plugin Mobile App Native 3.0.

Record
CVE-2017-6104
Updated
2026-11-02
EUVDEUVD-2017-15169 No score

Remote file upload vulnerability in Wordpress Plugin Mobile App Native 3.0.

Record
EUVD-2017-15169
Updated
2026-11-03
GitHub AdvisoriesGHSA-9pfx-9vhr-v8mj 7.5

Remote file upload vulnerability in Wordpress Plugin Mobile App Native 3.0.

Remote file upload vulnerability in Wordpress Plugin Mobile App Native 3.0.

Record
GHSA-9pfx-9vhr-v8mj
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Weakness
CWE-287
Updated
2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBMultiple WordPress Plugins - Arbitrary File Upload2017-03-03

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2017-6104 is a high vulnerability (CVSS 7.5) in Zen Mobile App Native Project Mobile App Native, published March 2, 2017. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 7.32%, the 94th percentile. No source names a fixed version.

References

MoveEnter Open