WordPress Plugin Vulnerabilities

Tajer - Unauthenticated Arbitrary File Upload

Description

The tajer WordPress plugin was affected by an Unauthenticated Arbitrary File Upload security vulnerability.

Proof of Concept

Affects Plugins

Plugin icon
tajer
No known fix

References

CVE
CVE-2018-9206
URL
http://www.vapidlabs.com/advisory.php?v=205

Miscellaneous

Original Researcher
Larry W. Cashdollar, @_larry0
Submitter
Ryan Dewhurst
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
655bc140-5bbf-4a7e-b20d-4343a75c0c67

Timeline

Publicly Published
2018-10-15 (about 7 years ago)
Added
2018-10-19 (about 7 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2024-10-14
Title
Digital Lottery <= 3.0.5 - Unauthenticated Arbitrary File Upload
Published
2014-08-01
Title
Kino Gallery 1.0 - Shell Upload
Published
2026-01-23
Title
Hustle < 7.8.9.3 - Subscriber+ Arbitrary File Upload via Module Import
Published
2014-08-01
Title
Really Easy Slider 0.1 - Shell Upload
Published
2018-10-31
Title
GoUrl Bitcoin Payment Gateway < 1.4.14 - Shell Upload