CVE-2017-1002003 Wp2android <= 1.1.4 - Arbitrary File Upload
CriticalCVSS 9.8
EPSS 12.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Vulnerability in wordpress plugin wp2android-turn-wp-site-into-android-app v1.1.4, The plugin includes unlicensed vulnerable CMS software from http://www.invedion.com.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wp2android-turn-wp-site-into-android-app project wp2android-turn-wp-site-into-android-app | = 1.1.4 | No fix listed |
| wordpress wp2android-turn-wp-site-into-android-app(WordPress) | <= 1.1.4 | No fix listed |
| Invedion wp2android-turn-wp-site-into-android-app | < 1.1.4 | 1.1.4 |
References
- 96908 third-party-advisory vdb-entry
- www.vapidlabs.com exploit third-party-advisory
- wordpress.org not-applicable
- 41540 exploit third-party-advisory vdb-entry
- Wordfence Intelligence third-party-advisory
- www.cve.org