Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
ProfilePress 3.0 - 3.1.3 - Arbitrary File Upload in Image Uploader Component
Vulnerability Description
A vulnerability in the image uploader component found in the ~/src/Classes/ImageUploader.php file of the ProfilePress WordPress plugin made it possible for users to upload arbitrary files during user registration or during profile updates. This issue affects versions 3.0.0 - 3.1.3. .
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
危险类型文件的不加限制上传
Vulnerability Title
WordPress 代码问题漏洞
Vulnerability Description
WordPress是WordPress（Wordpress）基金会的一套使用PHP语言开发的博客平台。该平台支持在PHP和MySQL的服务器上架设个人博客网站。 WordPress ProfilePress 插件存在代码问题漏洞，该漏洞源于 src Classes ImageUploader.php文件中发现的一个图像上传组件漏洞，使得用户可以在用户注册或更新配置文件时上传任意文件。
CVSS Information
N/A
Vulnerability Type
N/A