WordPress Frontend File Manager < 4.0 & N-Media Post Frontend < 1.1 - Arbitrary File Upload

The Frontend File Manager plugin 4.0 and N-Media Post Front-end Form plugin 1.1 for WordPress were vulnerable to arbitrary file uploads due to missing file type validation. This allowed unauthenticated attackers to upload arbitrary files and potentially achieve remote code execution. id:...

lab-cve-2016-15042

CVE-2016-15042 – WordPress 前端文件管理器与 N‑Media 帖子前端表单未认证文件上传（PoC 实验环境） 完全可复现、基于 Docker 的实验环境，用于验证和演示 CVE-2016-15042： Frontend File Manager nmedia-user-file-uploader v3.7（有漏洞 4.0） N‑Media Post Front‑end Form wp-post-frontend v1.0（有漏洞 1.1） 本仓库提供一键设置、使用 Nuclei 的验证步骤以及供审查者使用的制品。关键词：WordPress,...