11 matches found
CVE-2016-10954
The Neosense theme before 1.8 for WordPress has qquploader unrestricted file upload...
EUVD-2016-1945
Malware in sbrugna...
WordPress Neosense theme code issue vulnerability
WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A code issue vulnerability exists in WordPress Neosense theme versions prior to 1.8. The vulnerability stems...
CVE-2016-10954
The Neosense theme before 1.8 for WordPress has qquploader unrestricted file upload...
CVE-2016-10954
The Neosense theme before 1.8 for WordPress has qquploader unrestricted file upload...
Unrestricted file upload
The Neosense theme before 1.8 for WordPress has qquploader unrestricted file upload...
CVE-2016-10954
The Neosense theme before 1.8 for WordPress has qquploader unrestricted file upload...
PT-2019-7747 · WordPress · Neosense Theme
Name of the Vulnerable Software and Affected Versions: Neosense theme versions prior to 1.8 for WordPress Description: The issue concerns an unrestricted file upload in the qquploader component of the Neosense theme. This allows for potential security risks due to the lack of restrictions on file...
WordPress Neosense Theme Upload Vulnerability
WordPress is a set of blogging platforms developed using the PHP language by the WordPress Software Foundation.Neosense is a dynamic news theme for WordPress. An upload vulnerability exists in WordPress Neosense Theme. An attacker can exploit this vulnerability to upload arbitrary files to the...
WordPress Neosense Theme <= 1.7 - Unrestricted File Upload
A copy of the "qquploader" ajax file uploader was found in this theme's directory. An attacker can upload any file to the site by using this uploader. Solution Update the theme...
Neosense Theme < 1.8 - Unrestricted File Upload
Neosense is a commercial WordPress theme by dynamicpress. Version 1.7 and possibly earlier includes in its theme directory a copy of the "qquploader" ajax file uploader, which does not verify user authorization. Using this uploader, an attacker can upload any file to the site. The uploaded file i...