ThreatPress

WordPress Vulnerabilities Database

Back

WordPress DesignFolio Plus Theme 1.2 - Arbitrary File Upload

Product
DesignFolio Plus
Description
WordPress DesignFolio Plus theme is prone to an arbitrary file upload vulnerability. It allows an attacker to upload arbitrary files to the affected computer.
Solution
Update the theme.
Classification
Type Local File Inclusion
References
Exploit-DB
CVE
Name CVE-N/A
Versions
Affected In <= 1.2
Fixed In 1.3
Disclosure date
2015-03-04
Credits
CrashBandicot