Vendor
background-image-cropper
1 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Critical 9.8
WordPress Background Image Cropper 1.2 Remote Code Execution
WordPress Background Image Cropper version 1.2 contains a remote code execution vulnerability that allows unauthenticated attackers to upload arbitrary files by accessing the ups.php endpoint. Attackers can upload PHP files through the file upload form in the…