Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor User Photo Project Subscribe
Filtered by product User Photo
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2013-1916 1 User Photo Project 1 User Photo 2022-07-07 8.5 HIGH 8.8 HIGH
In WordPress Plugin User Photo 0.9.4, when a photo is uploaded, it is only partially validated and it is possible to upload a backdoor on the server hosting WordPress. This backdoor can be called (executed) even if the photo has not been yet approved.