Description
The Upload.am WordPress plugin before 1.0.1 is vulnerable to arbitrary option disclosure due to a missing capability check on its AJAX request handler, allowing users such as contributor to view site options.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Upload.am | < 1.0.1 | 1.0.1 |
References
- https://wpscan.com/vulnerability/531537f1-5547-4b0f-9e11-3f8a0b2589f5/ exploit vdb-entry technical-description