CVE-2024-9047: WordPress File Upload <= 4.24.11 - Arbitrary File Read

HoneyLabs honeypots recorded 7 probes matching CVE-2024-9047 from 1 distinct source IP addresses in the last 7 days. Severity is rated critical.

Request paths that identify it

  • /wp-content/plugins/wp-file-upload/wfu_file_downloader.php

Addresses probing it

Source IPProbesNetworkCountry
93.123.109.2147Techoff Srv LimitedBulgaria

Networks it comes from

ASNOrganisationProbesSource IPs
AS48090Techoff Srv Limited71

Captured requests

  • /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=dA5bJsd63OrijxvV&ticket=Y7kYgCuvlBjMtEmu&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileu…
  • /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=4COVrdS0IkwLSBS6&ticket=4DHjWQ2Kmn7GYZU4&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileu…
  • /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=t7FuskarvRwpUgQr&ticket=XoR0cFP0Gtihuedt&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileu…
  • /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=lSCT916gA7Bra7Yp&ticket=8DmJwf53emog1ut5&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileu…

CVE report

CVE report

Open a specific CVE from the CVE tracker.