Log out
Get PRO

Latest

Input validation vulnerability in WP User Frontend – Registration, User Profile, Membership, Content Restriction, User Directory, and Frontend Post Submission Plugin 2.3.11

  • Severity: critical
  • Status: Fixed
  • Publication: February 8, 2016

The WP User Frontend plugin for WordPress is vulnerable to malicious file uploads in versions prior to 2.3.11. This means that unauthenticated attackers can upload any type of file to the website’s server, which can lead to remote code execution.

Detected in:

Registration, User Profile, Membership, Content Restriction, User Directory, and Frontend Post Submission – WP User Frontend fixed vulnerable versions:
WP User Frontend – Registration, User Profile, Membership, Content Restriction, User Directory, and Frontend Post Submission Plugin fixed vulnerable versions: >= * < 2.3.11

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.

Join our mailing list - 6 Tips & Tricks in your inbox over the next days!

Plugins

© Really Simple Plugins
CoC 70461155
Kalmarweg 14-5
9723 JG, Groningen (NL)

Wordpress Linkedin Github

Get Started

About

Popular articles