CVE-2016-15043

緊急 9.8CVE-2016-15043 · 19/07/2025 公開 · 17/06/2026 更新

パッケージ	影響を受けるバージョン	修正済みバージョン
wp mobile detector wp_mobile_detector_project	`≤ 3.5`	修正版なし

概要

The WP Mobile Detector plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in resize.php file in versions up to, and including, 3.5. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected sites server which may make remote code execution possible.

参考情報

aadityapurani.com/2016/06/03/mobile-detector-poc · Exploit
blog.sucuri.net/2016/06/wp-mobile-detector-vulnerability-being-exploited-in-the-wild.html · Exploit
wordpress.org/plugins/wp-mobile-detector/changelog · Product
wpscan.com/vulnerability/e4739674-eed4-417e-8c4d-2f5351b057cf · Exploit
pluginvulnerabilities.com/2016/05/31/aribitrary-file-upload-vulnerability-in-wp-mobile-detector · Exploit
wordfence.com/threat-intel/vulnerabilities/id/5a5d5dbd-36f0-4886-adf8-045ec9c2e306 · Third Party Advisory

これらの製品をお使いですか？サイトをスキャンして、脆弱なバージョンが公開されていないか確認しましょう。

無料でサイトをスキャン