| Package | Affected versions | Patched versions |
|---|---|---|
| crelly slider | < 1.3.5 | 1.3.5 |
The crelly-slider plugin before 1.3.5 for WordPress has arbitrary file upload via a PHP file inside a ZIP archive to wp_ajax_crellyslider_importSlider.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free