CVE-2016-10959

creationtimestamp| type| source ---|---|--- 2019-09-16 16:33:00+00:00| seen| https://t.me/cibsecurity/6783...

CVE-2016-10959

The issue CVE-2016-10959 affects the Estatik WordPress plugin prior to 2.3.1. The vulnerability allows authenticated arbitrary file upload through es_media_images[] to wp-admin/admin-ajax.php, exploitable with CSRF. Impact details in sources indicate an authenticated path enabling file upload, wi...