CVE-2015-1376

pixabay-images.php in the Pixabay Images plugin before 2.4 for WordPress does not validate hostnames, which allows remote authenticated users to write to…

published January 28, 2015

CVSS
—
EPSS
33%
Percentile
98.4
In the wild
Unconfirmed
What it is

pixabay-images.php in the Pixabay Images plugin before 2.4 for WordPress does not validate hostnames, which allows remote authenticated users to write to arbitrary files via an upload URL with a host other than pixabay.com.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.33096 · 98.4th percentile
Published
2015-01-28T11:00Z
EPSS history
Timeline
  • 28 JAN 11:00Z
    pixabay-images.php in the Pixabay Images plugin before 2.4 for WordPress does not validate hostnames, which allows remote authenticated users to write to…
    cvelistv5