Xerte Online Vulnerabilities

This plugin is prone to a file upload vulnerability. Update plugin.

Affected:

up to 0.36

Fixed in:

0.36

Disclosed:

Jul 27, 2016

The Xerte Online plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via the save.php file in versions up to, and including, 0.35. This makes it possible for attackers to upload arbitrary files on the affected sites server which may make remote code execution possible.

CVSS:

9.8

Affected:

up to 0.35

Fixed in:

0.36

Disclosed:

Jan 3, 2013

The Xerte Online plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via the save.php file in versions up to, and including, 0.35. This makes it possible for attackers to upload arbitrary files on the affected sites server which may make remote code execution possible.

Affected:

up to 0.36

Fixed in:

0.36

Disclosed:

Jan 3, 2013

WordPress Chenpress plugin is prone to an arbitrary file upload vulnerability. It allows an attacker to upload arbitrary files to the affected computer. Update the plugin.

Affected:

up to 0.33

Fixed in:

0.33

Disclosed:

Jan 2, 2013

Affected:

up to 0.36

Fixed in:

0.36