CVE-2013-1916CWE-434

In WordPress Plugin User Photo 0.9.4, when a photo is uploaded, it is only partially validated and it is possible to upload a backdoor on the server hosting…

published June 24, 2022

CVSS
—
EPSS
13%
Percentile
96.3
In the wild
Unconfirmed
What it is

In WordPress Plugin User Photo 0.9.4, when a photo is uploaded, it is only partially validated and it is possible to upload a backdoor on the server hosting WordPress. This backdoor can be called (executed) even if the photo has not been yet approved.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.12847 · 96.3th percentile
Weakness
CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2022-06-24T15:00Z
EPSS history
Timeline
  • 24 JUN 15:00Z
    In WordPress Plugin User Photo 0.9.4, when a photo is uploaded, it is only partially validated and it is possible to upload a backdoor on the server hosting…
    cvelistv5