[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-ID: <20140702080316.GB13757@kludge.henri.nerv.fi>
Date: Wed, 2 Jul 2014 11:03:16 +0300
From: Henri Salo <henri@...v.fi>
To: oss-security@...ts.openwall.com
Subject: CVE request: WordPress plugin wysija-newsletters remote file upload
Can I get 2014 CVE for remote file upload vulnerability in WordPress plugin
wysija-newsletters, thanks.
Plugin name: MailPoet Newsletters
Plugin page: https://wordpress.org/plugins/wysija-newsletters/
Fixed in: 2.6.7
Discovered and reported by Sucuri
Reference:
http://blog.sucuri.net/2014/07/remote-file-upload-vulnerability-on-mailpoet-wysija-newsletters.html
Also detected by wpscan-tool:
https://github.com/wpscanteam/wpscan/commit/f9b10dc9db45f400918348b777f662c7140ee5fe
I can provide diffs between the versions if needed.
---
Henri Salo
Download attachment "signature.asc" of type "application/pgp-signature" (199 bytes)
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
