CVE-2013-1916

CVE-2013-1916 affects the WordPress Plugin User Photo 0.9.4. The issue is partial validation of uploaded images, allowing insertion of a backdoor on the server hosting WordPress, which can be executed even if the photo has not been approved. Descriptions across NVD/Red Hat/PRION entries confirm t...