CVE-2015-1000000

Remote file upload vulnerability in mailcwp v1.99 wordpress plugin...

WordPress MailCWP plugin 'mailcwp-upload.php' arbitrary file upload vulnerability

WordPress is the WordPress Software Foundation's suite of blogging platforms developed using the PHP language, which supports personal blogging sites on servers running PHP and MySQL.The MailCWP plugin allows users to access email directly through a WordPress blog or website. The MailCWP plugin h...

WordPress MailCWP Plugin <= 1.99 - Arbitrary File Upload

This plugin is prone to a arbitrary file upload vulnerability, because the code in mailcwp-upload.php doesn't check that a user is authenticated or what type of file is being uploaded. Solution Update the plugin...