Lucene search

K
wpvulndbWpvulndbWPVDB-ID:DC9EA90A-F73B-4DFE-9A78-766DA8B10967
HistoryNov 29, 2013 - 12:00 a.m.

OptimizePress Theme < 1.6 - Unauthenticated Arbitrary File Upload

2013-11-2900:00:00
wpscan.com
12

EPSS

0.179

Percentile

96.3%

The OptimizePress premium WordPress theme was vulnerable to Unauthenticated Arbitrary File Upload, which could allow unauthenticated attackers to compromise a WordPress site. This vulnerability has been seen exploited in the wild.

PoC

The affected file was: /wp-content/themes/OptimizePress/lib/admin/media-upload.php A Metasploit module also exists for this vulnerability, see references.

EPSS

0.179

Percentile

96.3%

Related for WPVDB-ID:DC9EA90A-F73B-4DFE-9A78-766DA8B10967