Show filters
4 Total Results
Displaying 1-4 of 4
Sort by:
Attacker Value
Unknown

CVE-2015-1375

Disclosure Date: January 28, 2015 (last updated October 05, 2023)
pixabay-images.php in the Pixabay Images plugin before 2.4 for WordPress does not properly restrict access to the upload functionality, which allows remote attackers to write to arbitrary files.
0
0
Attacker Value
Unknown

CVE-2015-1376

Disclosure Date: January 28, 2015 (last updated October 05, 2023)
pixabay-images.php in the Pixabay Images plugin before 2.4 for WordPress does not validate hostnames, which allows remote authenticated users to write to arbitrary files via an upload URL with a host other than pixabay.com.
0
0
Attacker Value
Unknown

CVE-2015-1366

Disclosure Date: January 27, 2015 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in pixabay-images.php in the Pixabay Images plugin before 2.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the image_user parameter.
0
0
Attacker Value
Unknown

CVE-2015-1365

Disclosure Date: January 27, 2015 (last updated October 05, 2023)
Directory traversal vulnerability in pixabay-images.php in the Pixabay Images plugin before 2.4 for WordPress allows remote attackers to write to arbitrary files via a .. (dot dot) in the q parameter.
0
0