{"id":"CVE-2020-24186","aliases":["EUVD-2020-16921","GHSA-c73j-6x9h-mrv2"],"status":"published","title":"A Remote Code Execution vulnerability exists in the gVectors wpDiscuz plugin 7.0 through 7.0.4...","description":"A Remote Code Execution vulnerability exists in the gVectors wpDiscuz plugin 7.0 through 7.0.4 for WordPress, which allows unauthenticated users to upload any type of file, including PHP files via the wmuUploadFiles AJAX action.","severity":{"version":"3.1","score":10,"vector":"CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:C/UI:N","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.94616,"percentile":0.99857,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-434"],"published":"2020-08-24T13:02:04Z","modified":"2026-06-17T03:05:16Z","exploits":[{"source":"exploitdb","id":"EDB-49962","title":"Wordpress Plugin wpDiscuz 7.0.4 - Arbitrary File Upload (Unauthenticated)","type":"webapps","platform":"php","date":"2021-06-07","url":"https://www.exploit-db.com/exploits/49962"},{"source":"exploitdb","id":"EDB-49967","title":"WordPress Plugin wpDiscuz 7.0.4 - Remote Code Execution (Unauthenticated)","type":"webapps","platform":"php","date":"2021-06-08","url":"https://www.exploit-db.com/exploits/49967"},{"source":"metasploit","id":"exploit/unix/webapp/wp_wpdiscuz_unauthenticated_file_upload","title":"WordPress wpDiscuz Unauthenticated File Upload Vulnerability","type":"exploit","platform":"PHP","date":"2020-02-21","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/unix/webapp/wp_wpdiscuz_unauthenticated_file_upload"},{"source":"nuclei","id":"CVE-2020-24186","title":"WordPress wpDiscuz \u003c=7.0.4 - Remote Code Execution","type":"detection template","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-24186.yaml"},{"source":"pocgithub","id":"GazettEl/CVE-2020-24186","title":"GazettEl/CVE-2020-24186","date":"2025-03-05","url":"https://github.com/GazettEl/CVE-2020-24186"},{"source":"pocgithub","id":"Sakura-501/CVE-2020-24186-exploit","title":"Sakura-501/CVE-2020-24186-exploit","date":"2022-04-05","url":"https://github.com/Sakura-501/CVE-2020-24186-exploit"},{"source":"pocgithub","id":"hev0x/CVE-2020-24186-wpDiscuz-7.0.4-RCE","title":"hev0x/CVE-2020-24186-wpDiscuz-7.0.4-RCE","date":"2021-06-13","url":"https://github.com/hev0x/CVE-2020-24186-wpDiscuz-7.0.4-RCE"},{"source":"pocgithub","id":"kiyingiericmark-wq/CVE-2020-24186","title":"kiyingiericmark-wq/CVE-2020-24186","date":"2026-09-29","url":"https://github.com/kiyingiericmark-wq/CVE-2020-24186"},{"source":"pocgithub","id":"meicookies/CVE-2020-24186","title":"meicookies/CVE-2020-24186","date":"2021-08-13","url":"https://github.com/meicookies/CVE-2020-24186"},{"source":"pocgithub","id":"sec-dojo-com/CVE-2020-24186","title":"sec-dojo-com/CVE-2020-24186","date":"2025-11-29","url":"https://github.com/sec-dojo-com/CVE-2020-24186"},{"source":"pocgithub","id":"substing/CVE-2020-24186_reverse_shell_upload","title":"substing/CVE-2020-24186_reverse_shell_upload","date":"2023-12-21","url":"https://github.com/substing/CVE-2020-24186_reverse_shell_upload"}],"products":[{"vendor":"gvectors","product":"wpdiscuz"}],"references":[{"url":"https://www.wordfence.com/blog/2020/07/critical-arbitrary-file-upload-vulnerability-patched-in-wpdiscuz-plugin/","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory"]},{"url":"http://packetstormsecurity.com/files/162983/WordPress-wpDiscuz-7.0.4-Shell-Upload.html","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://packetstormsecurity.com/files/163012/WordPress-wpDiscuz-7.0.4-Remote-Code-Execution.html","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://packetstormsecurity.com/files/163302/WordPress-wpDiscuz-7.0.4-Shell-Upload.html","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-24186"},{"url":"https://github.com/advisories/GHSA-c73j-6x9h-mrv2"}],"sources":{"cve":[{"id":"CVE-2020-24186","description":"A Remote Code Execution vulnerability exists in the gVectors wpDiscuz plugin 7.0 through 7.0.4 for WordPress, which allows unauthenticated users to upload any type of file, including PHP files via the wmuUploadFiles AJAX action.","status":"published","published":"2020-08-24T13:02:04Z","modified":"2024-08-04T15:05:11.853Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:C/UI:N","level":"critical","assessor":"cna"}],"updated_at":"2026-11-02T14:35:54.468882Z"}],"euvd":[{"id":"EUVD-2020-16921","description":"A Remote Code Execution vulnerability exists in the gVectors wpDiscuz plugin 7.0 through 7.0.4 for WordPress, which allows unauthenticated users to upload any type of file, including PHP files via the wmuUploadFiles AJAX action.","status":"published","published":"2020-08-24T13:02:04Z","modified":"2024-08-04T15:05:11Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:C/UI:N","level":"critical"}],"updated_at":"2026-11-03T03:07:20.733107Z"}],"ghsa":[{"id":"GHSA-c73j-6x9h-mrv2","title":"A Remote Code Execution vulnerability exists in the gVectors wpDiscuz plugin 7.0 through 7.0.4...","description":"A Remote Code Execution vulnerability exists in the gVectors wpDiscuz plugin 7.0 through 7.0.4 for WordPress, which allows unauthenticated users to upload any type of file, including PHP files via the wmuUploadFiles AJAX action.","status":"published","published":"2022-05-24T17:26:26Z","modified":"2023-01-29T05:04:14Z","cwes":["CWE-434"],"updated_at":"2026-11-02T14:45:30.341086Z"}],"nvd":[{"id":"CVE-2020-24186","description":"A Remote Code Execution vulnerability exists in the gVectors wpDiscuz plugin 7.0 through 7.0.4 for WordPress, which allows unauthenticated users to upload any type of file, including PHP files via the wmuUploadFiles AJAX action.","status":"published","published":"2020-08-24T14:15:12.143Z","modified":"2026-06-17T03:05:16.707Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-434"],"updated_at":"2026-11-02T14:06:13.05572Z"}]}}