WordPress Plugin Vulnerabilities

Contus Video Comments - Unauthenticated Remote JPG File Upload

Description

The contus-video-comments WordPress plugin was affected by an Unauthenticated Remote JPG File Upload security vulnerability.

Proof of Concept

Affects Plugins

Plugin icon
contus-video-comments
No known fix

References

URL
https://packetstormsecurity.com/files/#137598/

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
347fa6c1-69a8-49b0-a6b2-557ca6f8b082

Timeline

Publicly Published
2016-06-22 (about 9 years ago)
Added
2016-06-23 (about 9 years ago)
Last Updated
2019-11-01 (about 6 years ago)

Other

Published
Title
Published
2025-09-24
Title
Advanced Settings < 3.2.0 - Authenticated (Author+) Arbitrary File Upload
Published
2014-08-01
Title
grapefile <= 1.1 - Arbitrary File Upload
Published
2024-11-11
Title
Hive Support – WordPress Help Desk < 1.1.2 - Authenticated (Subscriber+) Arbitrary File Upload
Published
2025-04-01
Title
Front-End-Only-Users < 3.2.33 - Unauthenticated Arbitrary File Upload
Published
2024-11-08
Title
Image Classify <= 1.0.0 - Unauthenticated Arbitrary File Upload