CVE-2016-10954

The Neosense theme before 1.8 for WordPress has qquploader unrestricted file upload...

CVE-2016-10954

The CVE-2016-10954 issue affects the Neosense WordPress theme prior to 1.8, where the qquploader file uploader does not verify user authorization, enabling unrestricted file uploads. The vulnerability arises from the qquploader component, which can place uploaded files (potentially PHP scripts) i...

PT-2019-7747 · WordPress · Neosense Theme

Name of the Vulnerable Software and Affected Versions: Neosense theme versions prior to 1.8 for WordPress Description: The issue concerns an unrestricted file upload in the qquploader component of the Neosense theme. This allows for potential security risks due to the lack of restrictions on file...