Description
The WP Mobile Detector plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in resize.php file in versions up to, and including, 3.5. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected sites server which may make remote code execution possible.
Problem types
CWE-434 Unrestricted Upload of File with Dangerous Type
Product status
Any version
Timeline
| 2016-06-03: | Disclosed |
Credits
Aaditya Purani
References
www.wordfence.com/...-36f0-4886-adf8-045ec9c2e306?source=cve
blog.sucuri.net/...rability-being-exploited-in-the-wild.html
www.pluginvulnerabilities.com/...lity-in-wp-mobile-detector/
wordpress.org/plugins/wp-mobile-detector/changelog/
wpscan.com/...erability/e4739674-eed4-417e-8c4d-2f5351b057cf
aadityapurani.com/2016/06/03/mobile-detector-poc/