CVE-2015-1375 Pixabay Images <= 2.0 - Authentication Bypass to Arbitrary File Upload
HighCVSS 7.5
EPSS 11.9%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
pixabay-images.php in the Pixabay Images plugin before 2.4 for WordPress does not properly restrict access to the upload functionality, which allows remote attackers to write to arbitrary files.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pixabay images project pixabay images | <= 2.3 | No fix listed |
| wordpress pixabay-images(WordPress) | < 2.4 | 2.4 |
References
- packetstormsecurity.com exploit
- 20150120 MSA-2015-01: Wordpress Plugin Pixabay Images Multiple Vulnerabilities exploit mailing-list
- 35846 exploit
- [oss-security] 20150125 CVE request: MSA-2015-01: Wordpress Plugin Pixabay Images Multiple Vulnerabilities mailing-list
- 117146 vdb-entry
- 20150119 MSA-2015-01: Wordpress Plugin Pixabay Images Multiple Vulnerabilities mailing-list
- plugins.trac.wordpress.org
- Wordfence Intelligence third-party-advisory
- www.cve.org