Vulnerabilities (CVE)

Filtered by vendor User Photo Project Subscribe
Filtered by product User Photo
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2013-1916 1 User Photo Project 1 User Photo 2024-02-28 8.5 HIGH 8.8 HIGH
In WordPress Plugin User Photo 0.9.4, when a photo is uploaded, it is only partially validated and it is possible to upload a backdoor on the server hosting WordPress. This backdoor can be called (executed) even if the photo has not been yet approved.