Vulnerability Bulletins |
Cross-Site Request Forgery (CSRF)/Arbitrary File Upload Vulnerability in Participants Database |
|
| Affected software | Wordpress |
|
https://www.pluginvulnerabilities.com/2017/08/25/cross-site-request-forgery-csrfarbitrary-file-upload-vulnerability-in-participants-database/We recently started proactively monitoring for evidence of some high risk vulnerabilities when changes are made to WordPress plugins and if we had more customers we could expand the proactive monitoring to more types of vulnerabilities. One of the types of vulnerabilities we are looking for are arbitrary file upload vulnerabilities since those are likely More info: https://www.pluginvulnerabilities.com/2017/08/25/cross-site-request-forgery-csrfarbitrary-file-upload-vulnerability-in-participants-database/ |
|