CVE-2018-9172

Description

References

• wordpress.org/plugins/wp-file-upload · Third Party Advisory
• exploit-db.com/exploits/44443 · Exploit
• iptanus.com/new-version-4-3-3-of-wordpress-file-upload-plugin · Vendor Advisory

wordpress file upload의 다른 취약점

• CVE-2024-13494보통 4.3The WordPress File Upload plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.25.2. Thi…
• CVE-2024-9939높음 7.5The WordPress File Upload plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 4.24.13 via wfu_file_do…
• CVE-2024-11635심각 9.8The WordPress File Upload plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.24.12 via the …
• CVE-2024-11613심각 9.8The WordPress File Upload plugin for WordPress is vulnerable to Remote Code Execution, Arbitrary File Read, and Arbitrary File Deletion in a…
• CVE-2024-12719보통 4.3The WordPress File Upload plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'wfu_aj…