Default credentials

2019-09-1613:15:00

PRIOn knowledge base

www.prio-n.com

7.5 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

54.0%

The estatik plugin before 2.3.0 for WordPress has unauthenticated arbitrary file upload via es_media_images[] to wp-admin/admin-ajax.php.

CPENameOperatorVersion
estatiklt2.3.0

CPE	Name	Operator	Version
	estatik	lt	2.3.0

References

estatik.net/estatik-released-security-updates/

wordpress.org/plugins/estatik/

www.pluginvulnerabilities.com/2016/08/01/arbitrary-file-upload-vulnerability-in-estatik/