ThreatPress

WordPress Vulnerabilities Database

Back

WordPress Finale Lite plugin <= 2.9.0 - Arbitrary File Upload vulnerability

Product
Finale Lite
Description
Arbitrary File Upload vulnerability found in WordPress Finale Lite plugin (versions <= 2.9.0).
Solution
Update the WordPress Finale Lite plugin to the latest available version (at least 2.9.1).
Classification
Type Arbitrary File Upload
OWASP Top 10 A1: Injection
References
Plugin changelog
CVE
Name CVE-N/A
Versions
Affected In <= 2.9.0
Fixed In 2.9.1
Disclosure date
2019-06-16
Submitter
ThreatPress