Description
The estatik plugin before 2.3.1 for WordPress has authenticated arbitrary file upload (exploitable with CSRF) via es_media_images[] to wp-admin/admin-ajax.php.
Unscored
CVE-2016-10959
EUVD-2016-1950GHSA-x4w6-xc3h-38vf
The estatik plugin before 2.3.1 for WordPress has authenticated arbitrary file upload (exploitable with CSRF) via es_media_images[] to wp-a…
Published Sep 16, 2019 · Updated Aug 6, 2024 · Assigned by mitre