MailCWP <= 1.100 - Arbitrary File Upload
critical
TheMailCWP plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'mailcwp-upload.php' file in versions up to, and including, 1.100. This makes it possible for authenticated attackers to upload arbitrary files on the affected sites server which may make remote code execu...
- CVSS:
- 9.8
- Affected:
- up to 1.100
- Fix:
- No patched version reported
- Disclosed:
- Jul 10, 2015
CVE-2016-1000156 on NVD →
MailCWP <= 1.100 - Arbitrary File Upload
critical
The MailCWP plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'mailcwp-upload.php' file in versions up to, and including, 1.100. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected sites server which may make remote code ex...
- CVSS:
- 9.8
- Affected:
- up to 1.100
- Fixed in:
- 1.110
- Disclosed:
- Jul 9, 2015
CVE-2015-1000000 on NVD →
Protect your WordPress site
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free
← Back to the vulnerability database