CVE-2015-1172: Undefined Security Weakness

Unrestricted file upload vulnerability in admin/upload-file.php in the Holding Pattern theme aka holdingpattern 0.6 and earlier for WordPress allows remote attackers to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via a direct request to the file in an...

PT-2015-5144

Name of the Vulnerable Software and Affected Versions Holding Pattern theme aka holding pattern version 0.6 and earlier Description The issue allows remote attackers to execute arbitrary PHP code by uploading a file with a PHP extension to the admin/upload-file.php endpoint, and then accessing it...