CVE-2015-2194

CVE-2015-2194 (WordPress Fusion Theme 3.1): Unrestricted file upload in the Fusion theme’s fusion_options function (functions.php) allows an authenticated user to upload a file with an executable extension via fusion_save and then access it to execute arbitrary code. Public sources corroborate an...