WordPress Plugin Vulnerabilities

VideoWhisper Video Presentation 3.31.17 - Remote File Upload

Description

Vendor marked as won't fix. See references.

Affects Plugins

Plugin icon
videowhisper-video-presentation
No known fix

References

CVE
CVE-2015-9272
Exploitdb
36617
URL
https://packetstormsecurity.com/files/#131248/
URL
https://www.openwall.com/lists/oss-security/2015/04/01/2
URL
http://www.videowhisper.com/tickets_view.php?t=10019545-1427810822
URL
http://www.vapidlabs.com/advisory.php?v=117

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
99e809ba-8949-4f75-a6f6-e8c959acb8df

Timeline

Publicly Published
2015-03-29 (about 11 years ago)
Added
2015-04-01 (about 11 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2014-08-01
Title
Cold Fusion - Arbitrary File Upload
Published
2025-01-15
Title
Admin and Customer Messages After Order for WooCommerce < 13.3 - Authenticated (Subscriber+) Limited File Upload to Cross-Site Scripting
Published
2024-10-17
Title
Woostagram Connect <= 1.0.2 - Unauthenticated Arbitrary File Upload
Published
2024-07-22
Title
Redux Framework 4.4.12 - 4.4.17 - Unauthenticated JSON File Upload to Stored Cross-Site Scripting
Published
2021-03-21
Title
WooCommerce Help Scout < 2.9.1 - Unauthenticated Arbitrary File Upload leading to RCE