WordPreess Crelly Slider Plugin < 1.3.5 Arbitrary File Upload Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.113512";...

CVE-2019-15866

The crelly-slider plugin before 1.3.5 for WordPress has arbitrary file upload via a PHP file inside a ZIP archive to wpajaxcrellysliderimportSlider...

CVE-2019-15866

The CVE-2019-15866 entry concerns the WordPress crelly-slider plugin. Concrete details from connected documents show: the plugin before 1.3.5 permits arbitrary file upload by placing a PHP file inside a ZIP archive and sending it to wp_ajax_crellyslider_importSlider. This is a remote vulnerabilit...

CVE-2019-15866

The crelly-slider plugin before 1.3.5 for WordPress has arbitrary file upload via a PHP file inside a ZIP archive to wpajaxcrellysliderimportSlider...