The plugin's feature request form saves uploaded attachments into the WordPress uploads directory without checking the file type, so a logged-in user with Editor access or higher can upload a PHP file and run code on the server. Widgets for Google Reviews 11.0.2 and older are affected. This vulnerability affects the following application versions:... Weiterlesen: Unrestricted File Upload in Widgets for Google Reviews Feature Request
Intelligence View
⚡ tsecurity.de Intelligence
Unrestricted File Upload in Widgets for Google Reviews Feature Request
The plugin's feature request form saves uploaded attachments into the WordPress uploads directory without checking the file type, so a logged-in user with…
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
Intelligence Digest — free The top security news daily · unsubscribe anytime