Amoveo Multipurpose Wordpress Theme <= 2.0 - Arbitrary File Upload
criticalThe Amoveo Multipurpose Wordpress Theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via the upload_handler.php file in versions up to, and including, 2.0. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected sites server which may m...
- CVSS:
- 9.8
- Affected:
- up to 2.0
- Fix:
- No patched version reported
- Disclosed:
- Nov 2, 2013