WordPress Plugin Vulnerabilities

Tevolution < 2.3.0 - Unrestricted File Upload

Description

Files 'single-upload.php' and 'single_upload.php' affected.

Affects Plugins

Plugin icon
Tevolution
Fixed in 2.3.0

References

CVE
CVE-2016-10995
URL
https://templatic.com/news/security-vulnerability-found-themes/
URL
http://wptavern.com/templatic-hacked-files-and-databases-compromised

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
a9236599-c83a-4441-8373-c2157c8dbddc

Timeline

Publicly Published
2016-04-23 (about 10 years ago)
Added
2016-05-03 (about 10 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2014-08-01
Title
dagda - Arbitrary File Upload
Published
2025-04-26
Title
CSV Mass Importer <= 1.2 - Admin+ Arbitrary File Upload
Published
2014-08-01
Title
Image Manager - Shell Upload
Published
2022-02-07
Title
All-in-One WP Migration < 7.41 - Admin+ Arbitrary File Upload to RCE
Published
2023-11-20
Title
CataBlog <= 1.7.0 - Authenticated (Editor+) Arbitrary File Upload