plugin

Hungred Post Thumbnail Vulnerabilities

1 known security issue reported for the Hungred Post Thumbnail WordPress plugin. Most recent disclosed Jun 8, 2012.

1 critical

Running Hungred Post Thumbnail on your site? Check whether your installed version is affected.

Hungred Post Thumbnail <= 2.1.9 - Arbitrary File Upload

critical

The Hungred Post Thumbnail plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via the hpt_file_upload.php file in versions up to, and including, 2.1.9. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected sites server which may make...

CVSS:: 9.8
Affected:: up to 2.1.9
Fix:: No patched version reported
Disclosed:: Jun 8, 2012

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database