3 matches found
PT-2015-5250
Name of the Vulnerable Software and Affected Versions Pixabay Images plugin versions prior to 2.4 Description The issue concerns the Pixabay Images plugin for WordPress, where the pixabay-images.php file does not properly restrict access to the upload functionality. This allows remote attackers t...
PT-2015-5240
Name of the Vulnerable Software and Affected Versions Pixabay Images plugin versions prior to 2.4 Description The issue allows remote attackers to write to arbitrary files via a .. dot dot in the q parameter. This is a directory traversal vulnerability in the pixabay-images.php file...
PT-2015-5251
Name of the Vulnerable Software and Affected Versions Pixabay Images plugin versions prior to 2.4 Description The issue concerns the Pixabay Images plugin for WordPress, where the pixabay-images.php file does not validate hostnames. This allows remote authenticated users to write to arbitrary fil...