Lucene search
PRIOn knowledge basePRION:CVE-2019-25138HistoryJun 07, 2023 - 2:15 a.m.
Input validation
2023-06-0702:15:00
PRIOn knowledge base
www.prio-n.com
2
wordpress
plugin
vulnerability
arbitrary file uploads
missing file type validation
unauthenticated attackers
remote code execution
The User Submitted Posts plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the usp_check_images function in versions up to, and including, 20190312. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected sites server which may make remote code execution possible.
| CPE | Name | Operator | Version |
|---|---|---|---|
| user_submitted_posts | le | 20190312 |
Related
cve
cve
CVE-2019-25138
2023-06-07 02:15:09
nvd
nvd
CVE-2019-25138
2023-06-07 02:15:09
cvelist
cvelist
CVE-2019-25138
2023-06-07 01:51:22
cnvd
cnvd
WordPress Plugin User Submitted Posts Arbitrary File Upload Vulnerability
2023-06-14 00:00:00