Magn Html5 Drag And Drop Media Uploader Vulnerabilities

Update the plugin. JingoBD discovered and reported this Arbitrary File Upload vulnerability in WordPress Drag & Drop Plugin. This could allow a malicious actor to upload any type of file to your website. This can include backdoors which are then executed to gain further access to your website. This vulnerability has be...

Affected:

up to 1.1.5

Fixed in:

1.1.5

Disclosed:

May 15, 2023

This plugin is prone to shell upload vulnerability. Update the plugin.

Affected:

up to 1.1.5

Fixed in:

1.1.5

Disclosed:

May 15, 2015

The Magn WP Drag And Drop Media Uploader plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via the dndupload.php file in versions up to, and including, 1.2.0. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected sites server which...

CVSS:

9.8

Affected:

up to 1.2.0

Fixed in:

1.2.1

Disclosed:

Feb 23, 2013

The Magn WP Drag And Drop Media Uploader plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via the dndupload.php file in versions up to, and including, 1.2.0. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected sites server which...

Affected:

up to 1.2.1

Fixed in:

1.2.1

Disclosed:

Feb 23, 2013

The magn-html5-drag-and-drop-media-uploader WordPress plugin was affected by an Upload Shell Upload security vulnerability.

Affected:

up to 1.1.4

Fix:

No patched version reported