CVE-2015-1000013

The csv2wpec-coupon WordPress plugin version v1.1 is vulnerable to an unauthenticated remote file upload vulnerability. The root cause is that the csv2wpecCoupon_FileUpload.php file fails to properly sanitize user input; while it checks for the x-php mime-type, attackers can bypass this check usi...