Beveiligingsadvies

CVE-2023-0477

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-03-13 16:03:28

Laatst bijgewerkt 2025-02-27 20:19:02

Toegewezen door WPScan

CVSS-score geen score

Status PUBLISHED

Beschrijving

The Auto Featured Image (Auto Post Thumbnail) WordPress plugin before 3.9.16 includes an AJAX endpoint that allows any user with at least Author privileges to upload arbitrary files, such as PHP files. This is caused by incorrect file extension validation.

← Alle CVE's bekijken Bekijk op cve.org ↗