Kaswara Modern VC Addons <= 3.0.1 - Unauthenticated Arbitrary File Upload
52Vexday Risk Score
Corrija agora. Ela exploração observada pelo VulnCheck e tem exploit funcional público.
ssvc Actepss 42%
da publicação à arma
Publicada no NVD14 de mai.
VulnCheck+954d
probabilidade de exploração
42%top 1% das CVEs
exploração observada
simVulnCheck
The Kaswara Modern VC Addons WordPress plugin through 3.0.1 allows unauthenticated arbitrary file upload via the 'uploadFontIcon' AJAX action. The supplied zipfile being unzipped in the wp-content/uploads/kaswara/fonts_icon directory with no checks for malicious files such as PHP.
Produtos afetados
SayenThemes · Kaswara Modern VC Addons