WordPress Frontend File Manager < 4.0 & N-Media Post Frontend < 1.1 - Arbitrary File Upload

The Frontend File Manager plugin 4.0 and N-Media Post Front-end Form plugin 1.1 for WordPress were vulnerable to arbitrary file uploads due to missing file type validation. This allowed unauthenticated attackers to upload arbitrary files and potentially achieve remote code execution. id:...

lab-cve-2016-15042

CVE-2016-15042 – WordPress Frontend File Manager 및 N‑Media Post Front‑end Form 인증되지 않은 파일 업로드 PoC Lab 완전히 재현 가능하며, CVE-2016-15042를 검증하고 시연하기 위한 Docker화된 연구실입니다. Frontend File Manager nmedia-user-file-uploader v3.7 취약 버전 4.0 N‑Media Post Front‑end Form wp-post-frontend v1.0 취약 버전 1.1 이 저장소는 원클릭 설정...