Wp Front End Repository Vulnerabilities

The WP Front-End Repository Manager plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in versions up to, and including, 1.1. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected sites server which may make remote code execution pos...

CVSS:

9.8

Affected:

up to 1.1

Fix:

No patched version reported

Disclosed:

Jul 12, 2015

Because of this vulnerability, users can upload malicious executable scripts. Update the plugin.

Affected:

up to 1.2

Fixed in:

1.2

Disclosed:

Jul 12, 2015

The WP Front-End Repository Manager plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in versions up to, and including, 1.1. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected sites server which may make remote code execution pos...

Affected:

up to 1.1

Fix:

No patched version reported

Disclosed:

Jul 12, 2015

The wp-front-end-repository WordPress plugin was affected by an Arbitrary File Upload security vulnerability.

Affected:

up to 1.1

Fix:

No patched version reported