CVE-2017-1002003

Vulnerability in wordpress plugin wp2android-turn-wp-site-into-android-app v1.1.4, The plugin includes unlicensed vulnerable CMS software from http://www.invedion.com...

CVE-2017-1002003

CVE-2017-1002003 affects the WordPress plugin wp2android-turn-wp-site-into-android-app (version 1.1.4). The vulnerability stems from the plugin embedding unlicensed vulnerable CMS software from invedion.com, enabling an arbitrary file upload via the plugin’s functionality (as evidenced by multipl...

WordPress Multiple Plugin File Upload

import requests import random import string print "---------------------------------------------------------------------" print "Multiple Wordpress Plugin - Remote File Upload Exploit\nDiscovery: Larry W. Cashdollar\nExploit Author: Munir Njiru\nCWE: 434\n\n1. Zen App Mobile Native =3.0...