CVE-2016-10997

CVE-2016-10997 affects the Beauty-Premium Theme 1.0.8 for WordPress. Multiple sources (NVD, Red Hat, CVE lists, WPVulnDB) describe a CSRF flaw in includes/sendmail.php that enables arbitrary file upload. Concretely, the vulnerability arises from CSRF allowing an attacker-controlled request to upl...

WordPress Beauty & Clean 1.0.8 Theme - Arbitrary File Upload

Exploit for php platform in category web applications Exploit Title: Wordpress Beauty Theme File Upload Vulnerability v1.0.8 Discovery Date: 02.09.2016 Public Disclosure Date:03.09.2016 Vendor Homepage: http://www.yourinspirationweb.com Exploit Author: Colette Chamberland Wordfence Contact:...