10 matches found
EUVD-2016-1908
Malware in sbrugna...
WordPress Add From Server plugin <= 3.4.2 - Authenticated Path Traversal leading to Arbitrary File Access vulnerability
Authenticated Path Traversal leading to Arbitrary File Access vulnerability found by HoanHP in WordPress Add From Server plugin versions = 3.4.2. Solution Update the WordPress Add From Server plugin to the latest available version at least 3.4.3...
WordPress add-from-server plugin cross-site request forgery vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. add-from-server is a file upload plugin used in it. A cross-site request forgery vulnerability exists in the WordPress add-from-server...
CVE-2016-10914
The add-from-server plugin before 3.3.2 for WordPress has CSRF for importing a large file...
Cross site request forgery (csrf)
The add-from-server plugin before 3.3.2 for WordPress has CSRF for importing a large file...
CVE-2016-10914
The add-from-server plugin before 3.3.2 for WordPress has CSRF for importing a large file...
CVE-2016-10914
The CVE-2016-10914 issue affects the WordPress add-from-server plugin prior to version 3.3.2, where CSRF allows importing a large file. Several sources (Red Hat, CNVD, CVE listings, WPVulnDB) consistently describe this as a CSRF vulnerability in the add-from-server plugin, with potential impact i...
WordPress Plugin Add From Server < 3.3.2 - Cross-Site Request Forgery (Arbitrary File Upload)
Cross-Site Request Forgery vulnerability in Add From Server WordPress Plugin Abstract It was discovered that Add From Server is vulnerabile to Cross-Site Request Forgery. It can be exploited by luring the target user into clicking a specially crafted link or visiting a malicious website or...
WordPress Add From Server 6.2 Cross Site Request Forgery
------------------------------------------------------------------------ Cross-Site Request Forgery vulnerability in Add From Server WordPress Plugin ------------------------------------------------------------------------ Edwin Molenaar, July 2016...
WordPress Add From Server Plugin 3.3.1 Plugin - CSRF
A Cross-Site Request Forgery CSRF was discovered in WordPress Add From Server Plugin 3.3.2 plugin. The function handleimports in add-from-server/class.add-from-server.php is not protected with an anti-Cross-Site Request Forgery token, therefore it allows remote attackers to add illegal content to...