CVE-2024-52370

Name of the Vulnerable Software and Affected Versions Hive Support – WordPress Help Desk versions 1.1.1 and earlier

Description The issue allows for the unrestricted upload of files with dangerous types, potentially enabling an attacker to upload a web shell to a web server. This could grant an attacker full control of the site.

Recommendations For versions 1.1.1 and earlier, update to the latest version to patch the issue. As a temporary workaround, consider restricting file uploads or disabling the upload feature until the update is applied.