Wp2Android Turn Wp Site Into Android App Vulnerabilities

The Wp2android plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ~/server/images.php file in versions up to, and including, 1.1.4. That combined with the ability to directly access the file makes it possible for unauthenticated attackers to upload arbitrary files on...

CVSS:

9.8

Affected:

up to 1.1.4

Fix:

No patched version reported

Disclosed:

Mar 7, 2017

CVE-2017-1002003 on NVD →