Vulnerability Bulletins |
WPS Cleaner v1.4.4 Multiples Vulnerabilities |
|
| Affected software | Wordpress |
|
https://secupress.me/blog/wps-cleaner-v1-4-4-multiples-vulnerabilities/WPS Limit Login is edited by WP Serveur, WordPress french host. Criticity level for this update is high. Disclose File : /classes/plugin.php Line 1070 : $files = esc_attr( $_POST[‘files’] ); Issue : No control of the sent IDs to be sure they are attached media so we can change IDs to select any other (private […] More info: https://secupress.me/blog/wps-cleaner-v1-4-4-multiples-vulnerabilities/ |
|