CVE-2015-9272

creationtimestamp| type| source ---|---|--- 2018-10-05 12:20:12+00:00| seen| https://t.me/cibsecurity/537...

CVE-2015-9272

CVE-2015-9272 affects the videowhisper-video-presentation plugin for WordPress (version 3.31.17). The flaw is in vp/vw_upload.php, which considers a file safe when the last four characters are "html", allowing a .phtml file containing PHP code to execute arbitrary code remotely. Reported impact i...