← Back

User Photo

user_photo

Vendor: User Photo Project • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1User Photo Project
1User Photo
Nov 21, 2024
Jun 24, 2022
N/A· v4
8.8 HIGH· v3
8.5 HIGH· v2
In WordPress Plugin User Photo 0.9.4, when a photo is uploaded, it is only partially validated and it is possible to upload a backdoor on the server hosting WordPress. This backdoor can be called (executed) even if the p...Show more
In WordPress Plugin User Photo 0.9.4, when a photo is uploaded, it is only partially validated and it is possible to upload a backdoor on the server hosting WordPress. This backdoor can be called (executed) even if the photo has not been yet approved.Show less