CVE-2016-10959

概要

参考情報

• wordpress.org/plugins/estatik · Release Notes
• pluginvulnerabilities.com/2016/08/19/authenticated-arbitrary-file-upload-vulnerability-in-estatik · Exploit

estatik のその他の脆弱性

• CVE-2023-6050中 6.1The Estatik Real Estate Plugin WordPress plugin before 4.1.1 does not sanitise and escape various parameters and generated URLs before outpu…
• CVE-2023-6049緊急 9.8The Estatik Real Estate Plugin WordPress plugin before 4.1.1 unserializes user input via some of its cookies, which could allow unauthentica…
• CVE-2023-6048中 6.5The Estatik Real Estate Plugin WordPress plugin before 4.1.1 does not prevent user with low privileges on the site, like subscribers, from s…
• CVE-2016-10958高 7.5The estatik plugin before 2.3.0 for WordPress has unauthenticated arbitrary file upload via es_media_images[] to wp-admin/admin-ajax.php.