[WordPress Auto Featured Image (Auto Post Thumbnail) Plugin](versions 3.9.16 and older) Vulnerable to Arbitrary File Upload
Importance (CVSS3.0)
★★★★★★★★★☆ 9.1 / 10 - Critical
Details
A vulnerability of Arbitrary File Upload was discovered in WordPress Auto Featured Image (Auto Post Thumbnail) Plugin.
This vulnerability allows malicious attackers to upload any kinds of files on the target website.
This vulnerability hasn’t been fixed in version 3.9.16.
Solutions
Update WordPress Auto Featured Image (Auto Post Thumbnail) Plugin to the latest version (at least 3.9.26 and older)
Source
We provide information about critical vulnerabilities of WordPress for people who are using or are considering using Wordpress for their projects.
[WordPress Auto Featured Image (Auto Post Thumbnail) Plugin](versions 3.9.16 and older) Vulnerable to Arbitrary File Upload, by WS Security is licensed under CC BY 4.0.
Comments