Skip to content
OpenAdvisories

Product · G5Theme

Benaa Framework

3 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.8

    Smart Framework <= Multiple Plugins - Authenticated (Subscriber+) Arbitrary File Upload

    Multiple plugins and/or themes for WordPress are vulnerable to Arbitrary File Uploads due to a missing capability check on the ajaxUploadFonts() function in various versions. This makes it possible for authenticated attackers, with Subscriber-level access and…