WordPress Plugin Vulnerabilities

Crelly Slider <= 1.3.4 - Arbitrary File Upload

Description

The Crelly Slider WordPress plugin was affected by an Arbitrary File Upload security vulnerability.

Affects Plugins

Plugin icon
crelly-slider
Fixed in 1.3.5

References

CVE
CVE-2019-15866
URL
https://blog.nintechnet.com/arbitrary-file-upload-vulnerability-in-wordpress-crelly-slider-plugin/

Miscellaneous

Original Researcher
NinTechNet
Verified
No
WPVDB ID
d8be016c-a257-4f0d-8abb-f62fdaba79a3

Timeline

Publicly Published
2019-06-06 (about 6 years ago)
Added
2019-06-07 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2014-08-01
Title
WP Marketplace 1.1.0 - Shell Upload
Published
2023-08-28
Title
Prevent files / folders access < 2.5.2 - Admin+ Arbitrary File Upload
Published
2025-09-09
Title
Responsive Filterable Portfolio < 1.0.25 - Authenticated (Admin+) Arbitrary File Upload
Published
2026-03-12
Title
Mobile App Editor – WordPress to Android App Builder <= 1.3.1 - Authenticated (Editor+) Arbitrary File Upload
Published
2024-02-23
Title
Brizy – Page Builder < 2.4.41 - Authenticated (Contributor+) Arbitrary File Upload