CVE-2016-15043

The WP Mobile Detector plugin for WordPress is vulnerable to arbitrary file upload in versions up to and including 3.5 . The root cause is a missing file type validation in the resize.php file. This allows unauthenticated attackers to upload arbitrary files (such as .php files) to a user-accessib...