Filtered by vendor User Photo Project Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2013-1916 1 User Photo Project 1 User Photo 2024-11-21 8.8 High
In WordPress Plugin User Photo 0.9.4, when a photo is uploaded, it is only partially validated and it is possible to upload a backdoor on the server hosting WordPress. This backdoor can be called (executed) even if the photo has not been yet approved.