Log out
Get PRO

Latest

Input validation vulnerability in A/B Test for WordPress 1.0.7

  • Severity: critical
  • Status: Open
  • Publication: March 21, 2016

The A/B Test for WordPress plugin has a security vulnerability that can be exploited by attackers who have Admin+ level access. This vulnerability allows attackers to include and execute arbitrary files on the server, such as images or other “safe” file types. By doing this, attackers can bypass access controls, obtain sensitive data, or execute code. This vulnerability affects versions up to, and including, 1.0.7 of the ‘abtest_admin.php’ file.

Detected in:

A/B Test for WordPress open vulnerable versions: >= * <= 1.0.7

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.