← Back

User Photo Project

user_photo_project

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
User Photo
user_photo
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2013-1916
1User Photo Project
1User Photo
Nov 21, 2024
Jun 24, 2022
N/A· v4
8.8 HIGH· v3
8.5 HIGH· v2
In WordPress Plugin User Photo 0.9.4, when a photo is uploaded, it is only partially validated and it is possible to upload a backdoor on the server hosting WordPress. This backdoor can be called (executed) even if the p...Show more
In WordPress Plugin User Photo 0.9.4, when a photo is uploaded, it is only partially validated and it is possible to upload a backdoor on the server hosting WordPress. This backdoor can be called (executed) even if the photo has not been yet approved.Show less