CVE-2015-1000000

Remote file upload vulnerability in mailcwp v1.99 wordpress plugin...

CVE-2015-1000000

CVE-2015-1000000 affects the MailCWP WordPress plugin (around v1.99/v1.100) via an unauthenticated arbitrary file upload vulnerability. The root cause is improper access control in the upload logic (mailcwp-upload.php), allowing any user to upload a file without authentication or type checks, pot...