WordPress NewsBlogger Theme 0.2.5.1 Shell Upload

WordPress NewsBlogger Theme versions 0.2.5.1 and below suffer from a remote shell upload vulnerability...

PT-2025-18354 · WordPress · Newsblogger

Name of the Vulnerable Software and Affected Versions: NewsBlogger theme for WordPress versions up to, and including, 0.2.5.4 Description: The NewsBlogger theme for WordPress is vulnerable to Cross-Site Request Forgery due to missing or incorrect nonce validation on the newsblogger install and...

WordPress NewsBlogger plugin <= 0.2.5.1 - Authenticated (Subscriber+) Arbitrary File Upload vulnerability

Authenticated Subscriber+ Arbitrary File Upload vulnerability discovered by CVEhunter in WordPress Theme NewsBlogger versions = 0.2.5.1...