CVE-2016-10995

The Tevolution plugin before 2.3.0 for WordPress has arbitrary file upload via singleupload.php or single-upload.php...

CVE-2016-10995

The CVE describes an arbitrary file upload vulnerability in the Tevolution WordPress plugin prior to version 2.3.0, exploitable via single_upload.php or single-upload.php. The issue affects Tevolution for WordPress and is confirmed by multiple sources (Red Hat and NVD). Impact in the public discl...