Wordpress Fusion Theme Arbitrary File Upload Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL.Fusion is one of the corporate themes. An arbitrary file upload vulnerability exists in the 'fusionoptions' function in the...

PT-2015-5655

Name of the Vulnerable Software and Affected Versions Fusion theme version 3.1 for Wordpress Description The issue allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension in a fusion save action. This is due to an unrestricted file upload...