File Upload Vulnerability in Pixabay Images Plugin for WordPress
CVE-2015-1375

Currently unrated

Key Information:

Vendor
Wordpress
Status
Pixabay Images
Vendor
CVE Published:
28 January 2015

Summary

The Pixabay Images plugin for WordPress prior to version 2.4 contains a file upload vulnerability due to improper access restrictions in the pixabay-images.php component. This flaw allows remote attackers to exploit the upload functionality, potentially leading to unauthorized writing of files on the server. This vulnerability poses significant security concerns as it may allow for the execution of malicious code or access to sensitive data.

References

http://seclists.org/fulldisclosure/2015/Jan/75
mailing-listx_refsource_FULLDISC
https://plugins.trac.wordpress.org/changeset?sfp_email=&s...
x_refsource_CONFIRM
http://www.osvdb.org/117146
vdb-entryx_refsource_OSVDB

EPSS Score

19% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.