SlimStat-Ex <= 2.1.2 - Arbitrary Code Execution
criticalThe SlimStat-Ex plugin for WordPress is vulnerable to Arbitrary Code Execution via the 'ofc_upload_image.php' file in versions up to, and including, 2.1.2. This makes it possible for unauthenticated attackers to remotely execute potentially malicious code.
- CVSS:
- 9.8
- Affected:
- up to 2.1.2
- Fix:
- No patched version reported
- Disclosed:
- Oct 3, 2013