ThreatPress

WordPress Vulnerabilities Database

Back

WordPress Felici Theme - Arbitrary File Upload

Product
Felici
Description
WordPress Felici theme is prone to an arbitrary file upload vulnerability via "uploadify.php". It allows an attacker to upload arbitrary PHP code and run it in the context of the Web server process. This may facilitate unauthorized access or privilege escalation.
Solution
Upgrade the theme.
Classification
Type Arbitrary File Upload
References
Exploit-DB
CVE
Name CVE-N/A
Versions
Affected In <= 1.7
Fixed In 1.8
Disclosure date
2014-03-23
Credits
CaFc Versace