Not rated

CVE-2013-1916 In WordPress Plugin User Photo 0.9.4, when a photo is uploaded, it is only partially validated and it is possible to…

Description

In WordPress Plugin User Photo 0.9.4, when a photo is uploaded, it is only partially validated and it is possible to upload a backdoor on the server hosting WordPress. This backdoor can be called (executed) even if the photo has not been yet approved.

Affected products and versions

Product	Affected versions	Fixed in
WordPress Plugin User Photo	Versions not published

Do you use WordPress Plugin User Photo?

Track this CVE Watch WordPress Plugin User Photo Check my SBOMs

www.cveye.io/en/cve/CVE-2013-1916

Timeline

Published June 24, 2022
Last modified August 6, 2024

References

wordpress.org wordpress.org
plugins.trac.wordpress.org plugins.trac.wordpress.org
www.exploit-db.com www.exploit-db.com

Track this CVE