BuddyPress XProfile Custom Image Field plugin allows unauthenticated file deletion
Anyone can delete files on WordPress sites that allow signups!
Summary
Crafted signup data lets an unauthenticated visitor delete arbitrary files on the server. WordPress sites with open registration and an image-type profile field on the signup form are affected.
Affected when
- open registration
- an image-type profile field on the signup form
What to do
No source names a fixed version. Versions up to and including 3.1.0 are affected, so check that the plugin runs a newer version and read the vendor advisory.
Products and platforms
CVE IDs
Sources
- CVE record: cve.org (opens in a new tab)
Times
First published
First seen