Input validation vulnerability in Recip.ly Plugin 1.1.7

The Recip.ly Plugin for WordPress is vulnerable to a security issue that could allow unauthorized people to upload files to the server hosting the WordPress website. This vulnerability exists in all versions of the plugin up to 1.1.7, and is caused by a lack of file type validation in uploadImage.php. If exploited, the malicious files uploaded to the site’s server could be used to gain access to the server and potentially execute malicious code.

Detected in:

Recip.ly Plugin open vulnerable versions: >= * <= 1.1.7

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.