Skip to content
OpenAdvisories

Vendor

scribu

1 known vulnerabilities.

Products

Front-end Editor 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2012-10019 Public exploit

    Front-end Editor < 2.3 - Arbitrary File Upload

    The Front End Editor plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via the upload.php file in versions before 2.3. This makes it possible for unauthenticated attackers to upload arbitrary files on the affecte…

    scribu Front-end Editor Web / CMS