CVE-2016-10958

The estatik plugin before 2.3.0 for WordPress has unauthenticated arbitrary file upload via esmediaimages to wp-admin/admin-ajax.php...

CVE-2016-10958: Unrestricted Upload of File with Dangerous Type

The estatik plugin before 2.3.0 for WordPress has unauthenticated arbitrary file upload via esmediaimages to wp-admin/admin-ajax.php...

CVE-2016-10959: Unrestricted Upload of File with Dangerous Type

The estatik plugin before 2.3.1 for WordPress has authenticated arbitrary file upload exploitable with CSRF via esmediaimages to wp-admin/admin-ajax.php...

PT-2019-7752

Name of the Vulnerable Software and Affected Versions Estatik plugin versions prior to 2.3.1 for WordPress Description The issue concerns an authenticated arbitrary file upload, which is also exploitable with CSRF, via the es media images parameter to the "wp-admin/admin-ajax.php" API endpoint...

PT-2019-7751

Name of the Vulnerable Software and Affected Versions Estatik plugin versions prior to 2.3.0 for WordPress Description The issue allows for unauthenticated arbitrary file upload. This is achieved by exploiting the es media images parameter in the "wp-admin/admin-ajax.php" API endpoint...

WordPress Estatik Plugin <= 2.2.5 - Arbitrary File Upload Vulnerability

A file uploaded vulnerability is in WordPress Estatik Plugin in v2.2.5. The issue is in the function espropmediaimages, it allows to upload a file for anyone. Solution Update the plugin...

Estatik < 2.3.1 - Arbitrary File Upload

The Estatik Real Estate Plugin WordPress plugin was affected by an Arbitrary File Upload security vulnerability...

WordPress Estatik Plugin <= 2.2.5 - Arbitrary File Upload

Because of this vulnerability, an attacker can upload the arbitrary file and put it in the current month’s directory inside of the /wp-content/uploads/ directory. Solution Update the plugin...