WordPress Plugin Vulnerabilities

Theme Test Drive <= 2.9 - Authenticated File Upload & XSS

Description

The Theme Test Drive WordPress plugin was affected by an Authenticated File Upload & XSS security vulnerability.

Affects Plugins

Plugin icon
theme-test-drive
Fixed in 2.9.1

References

URL
http://cinu.pl/research/wp-plugins/mail_38b543898e86d33a4df83f1424580267.html
URL
http://blog.cinu.pl/2015/11/php-static-code-analysis-vs-top-1000-wordpress-plugins.html

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
101162ea-b72a-460a-92b2-7a38631784a9

Timeline

Publicly Published
2015-11-23 (about 10 years ago)
Added
2015-11-23 (about 10 years ago)
Last Updated
2019-10-31 (about 6 years ago)

Other

Published
Title
Published
2014-09-17
Title
Ready! Ecommerce 0.5.0 - CSRF & XSS
Published
2019-06-07
Title
ConvertPlus <= 3.4.4 - Multiple Issues
Published
2015-09-20
Title
wordpress vertical image slider plugin < 1.2 - Cross-Site Scripting & CSRF
Published
2017-05-31
Title
Simple Slideshow Manager <= 2.3 – Multiple Vulnerabilities
Published
2019-07-04
Title
Ocean Extra <= 1.5.8 - Unauthenticated Settings change and CSS injection