Design/Logic Flaw

2023-01-0923:15:00

PRIOn knowledge base

www.prio-n.com

wptouch

wordpress plugin

logic flaw

high privilege users

arbitrary files

server vulnerability

nvd

0.001 Low

EPSS

Percentile

36.8%

JSON

The WPtouch WordPress plugin before 4.3.45 does not properly validate images to be uploaded, allowing high privilege users such as admin to upload arbitrary files on the server even when they should not be allowed to (for example in multisite setup)

CPENameOperatorVersion
wptouchlt4.3.45

CPE	Name	Operator	Version
	wptouch	lt	4.3.45

References

wpscan.com/vulnerability/f927dbe0-3939-4882-a469-1309ac737ee6

0.001 Low

EPSS

Percentile

36.8%

JSON

Related for PRION:CVE-2022-3416