WordPress Theme Suco - themify-ajax.php Arbitrary File Upload

WordPress Theme Suco - themify-ajax.php Arbitrary File Upload source: https://www.securityfocus.com/bid/63836/info The Suco themes for WordPress is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize...

WordPress themify themes File Upload Vulnerability

all theme suffer of File Upload Vulnerability. all whitout autoritation can upload malicious code to all themify theme Usage Info prof of concept: code not properly sanitized at get function: function themifyupload if!empty$FILES if!isset$POST'target' || $POST'target' == '' $target =...