ThreatPress

WordPress Vulnerabilities Database

Back

WordPress Crelly Slider plugin <= 1.3.4 - Arbitrary File Upload vulnerability

Product
Crelly Slider
Description
Arbitrary File Upload vulnerability found by NinTechNet in WordPress Crelly Slider plugin (versions <= 1.3.4).
Solution
Update the WordPress Crelly Slider plugin to the latest available version (at least 1.3.5).
Classification
Type Arbitrary File Upload
OWASP Top 10 A1: Injection
References
Plugin changelog
CVE
Name CVE-N/A
Versions
Affected In <= 1.3.4
Fixed In 1.3.5
Disclosure date
2019-06-11
Credits
NinTechNet
Submitter
ThreatPress