164 matches found
WordPress WP All 3.2.3 Shell Upload
------------------------------------------------------------------------------ WordPress WP All Import Plugin RCE ------------------------------------------------------------------------------ - Vulnerability Author: James Golovich @Pritect - Exploit Author Evex @Evex1337 - Plugin Link:...
WordPress WP All Import Plugin <= 3.2.3 - Remote Code Execution
Because of this vulnerability, remote attackers can upload arbitrary files to system or retrieve any files on the system that ends in .txt or .html. Solution Update the plugin...
WP All Import Pro <= 4.1.0 - RCE
WP All Import does not properly verify that a user has permission to execute functions. Coupled with an interesting method that allows arbitrary functions in specific objects to be called allows this to be leveraged in many ways...
