WordPress WP User Frontend plugin <= 3.5.23 - SQL Injection (SQLi) vulnerability

SQL Injection SQLi vulnerability discovered in WordPress WP User Frontend plugin versions = 3.5.23. Solution Update the WordPress WP User Frontend plugin to the latest available version at least 3.5.25...

WordPress WP User Frontend Plugin Unlimited File Upload Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. Unlimited file upload vulnerability exists in WordPress WP User Frontend plugin versions prior to 2.3.11. Allows an attacker ...

WordPress WP User Frontend插件3.4.6文件上传漏洞

No description provided by source...

WordPress WP User Frontend 3.4.6 File Upload

Exploit Title: WordPress WP User Frontend Plugin Unrestricted File Upload Discovery Date: 2016-02-04 Public Disclosure: 2016-02-08 Exploit Author: Panagiotis Vagenas Contact: https://twitter.com/panVagenas Vendor Homepage: https://wedevs.com Software Link:...

WordPress Plugin WP User Frontend < 2.3.11 - Unrestricted Arbitrary File Upload

''' Exploit Title: WordPress WP User Frontend Plugin Unrestricted File Upload Discovery Date: 2016-02-04 Public Disclosure: 2016-02-08 Exploit Author: Panagiotis Vagenas Contact: https://twitter.com/panVagenas Vendor Homepage: https://wedevs.com Software Link:...

WP User Frontend <= 2.3.10 - Unrestricted File Upload

The WP User Frontend – Membership, Profile, Registration & Post Submission Plugin for WordPress WordPress plugin was affected by an Unrestricted File Upload security vulnerability...

WordPress WP User Frontend Plugin 2.3.10 - Unrestricted File Upload

Because of this vulnerability, anyone can upload files to the web server by performing certain "wpuffileupload" or "wpufinsertimage" actions. Solution Upgrade the plugin...

WordPress Plugin WP User Frontend 2.3.11 - Unrestricted Arbitrary File Upload

WordPress Plugin WP User Frontend 2.3.11 - Unrestricted Arbitrary File Upload ''' Exploit Title: WordPress WP User Frontend Plugin Unrestricted File Upload Discovery Date: 2016-02-04 Public Disclosure: 2016-02-08 Exploit Author: Panagiotis Vagenas Contact: https://twitter.com/panVagenas Vendor...