Description
kg_callffmpeg.php in the Video Embed & Thumbnail Generator plugin before 2.0 for WordPress allows remote attackers to execute arbitrary commands via unspecified vectors.
References
- videoembed-kgcallffmpeg-code-execution(73508) vdb-entry
- http://plugins.trac.wordpress.org/changeset?old_path=%2Fvideo-embed-thumbnail-generator&old=507924&new_path=%2Fvideo-embed-thumbnail-generator&new=507924
- 52180 vdb-entry
- 48087 third-party-advisory
- http://wordpress.org/extend/plugins/video-embed-thumbnail-generator/changelog/