CVE-2015-9402 Users Ultra Membership, Users Community and Member Profiles With PayPal Integration Plugin <= 1.5.58 - Arbitrary File Upload
HighCVSS 8.8
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The users-ultra plugin before 1.5.59 for WordPress has uultra-form-cvs-form-conf arbitrary file upload.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| usersultra users ultra membership | < 1.5.59 | 1.5.59 |
| wordpress users-ultra(WordPress) | < 1.5.59 | 1.5.59 |
References
- seclists.org mailing-list third-party-advisory
- wordpress.org product third-party-advisory
- wpvulndb.com third-party-advisory
- Wordfence Intelligence third-party-advisory
- www.cve.org