CVE-2019-15866

The crelly-slider plugin before 1.3.5 for WordPress has arbitrary file upload via a PHP file inside a ZIP archive to wp_ajax_crellyslider_importSlider

published September 3, 2019

CVSS
—
EPSS
2%
Percentile
80.9
In the wild
Unconfirmed
What it is

The crelly-slider plugin before 1.3.5 for WordPress has arbitrary file upload via a PHP file inside a ZIP archive to wp_ajax_crellyslider_importSlider.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02027 · 80.9th percentile
Published
2019-09-03T11:51Z
EPSS history
Timeline
  • 03 SEP 11:51Z
    The crelly-slider plugin before 1.3.5 for WordPress has arbitrary file upload via a PHP file inside a ZIP archive to wp_ajax_crellyslider_importSlider
    cvelistv5