| Package | Affected versions | Patched versions |
|---|---|---|
| user photo | = 0.9.4 |
In WordPress Plugin User Photo 0.9.4, when a photo is uploaded, it is only partially validated and it is possible to upload a backdoor on the server hosting WordPress. This backdoor can be called (executed) even if the photo has not been yet approved.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free