CVE-2024-6366-PoC

CVE-2024-6366-PoC User Profile Builder = 3.11.7 - Téléversement de médias non authentifié Description Le plugin WordPress User Profile Builder avant la version 3.11.8 ne dispose pas d'une autorisation appropriée, ce qui permet à des utilisateurs non authentifiés de téléverser des fichiers médias...

WordPress Schema & Structured Data for WP & AMP plugin < 1.60 - Unauthenticated Arbitrary Media Upload vulnerability

Unauthenticated Arbitrary Media Upload vulnerability discovered by 0xBassia in WordPress Plugin Schema & Structured Data for WP & AMP versions 1.60...

WordPress Funnelforms Free plugin <= 3.7.3.2 - Missing Authorization to Unauthenticated Arbitrary Media Upload and Deletion vulnerability

Missing Authorization to Unauthenticated Arbitrary Media Upload and Deletion vulnerability discovered by Lucio Sá in WordPress Plugin Funnelforms Free versions = 3.7.3.2...