Lucene search
MitreCVELIST:CVE-2016-10959HistorySep 16, 2019 - 12:08 p.m.
CVE-2016-10959
2019-09-1612:08:53
mitre
www.cve.org
0.001 Low
EPSS
Percentile
25.0%
The estatik plugin before 2.3.1 for WordPress has authenticated arbitrary file upload (exploitable with CSRF) via es_media_images[] to wp-admin/admin-ajax.php.
Related
cve
cve
CVE-2016-10959
2019-09-16 13:15:10
nvd
nvd
CVE-2016-10959
2019-09-16 13:15:10
prion
prion
Cross site request forgery (csrf)
2019-09-16 13:15:00
wpvulndb
wpvulndb
Estatik < 2.3.1 - Arbitrary File Upload
2016-08-01 00:00:00