CVE-2016-10995

The Tevolution plugin for WordPress (versions before 2.3.0 ) is vulnerable to arbitrary file upload . The flaw exists in the single_upload.php or single-upload.php components, allowing an attacker to upload files without proper restrictions. While the technical root cause is not explicitly detail...