CVE-2024-49329

CVE-2024-49329 is a critical vulnerability affecting Vivek Tamrakar's WP REST API FNS plugin, versions up to and including 1.0.0. It allows an unauthenticated attacker to upload files with dangerous types, potentially leading to the deployment of a web shell on the server. With a CVSS score of 9.8, this vulnerability poses a severe risk, enabling complete compromise of confidentiality, integrity, and availability. There is currently no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.