Security News > 2016 > September > Vulnerability Patched in WordPress Theme That Allows Unrestricted Uploads (Threatpost)

Vulnerability Patched in WordPress Theme That Allows Unrestricted Uploads (Threatpost)

2016-09-20 14:22

A vulnerability has been patched in a popular WordPress theme called Neosense that allows an attacker to upload code without authentication.

News URL

http://threatpost.com/vulnerability-patched-in-wordpress-theme-that-allows-unrestricted-uploads/120698/

#wordpress #vulnerability #threatpost

Related news

WordPress Plugin Jetpack Patches Major Vulnerability Affecting 27 Million Sites (source)
LiteSpeed Cache Plugin Vulnerability Poses Significant Risk to WordPress Websites (source)
Urgent: Critical WordPress Plugin Vulnerability Exposes Over 4 Million Sites (source)

Related vendor

VENDOR	LAST 12M	#/PRODUCTS	LOW	MEDIUM	HIGH	CRITICAL	TOTAL VULNS
Wordpress		7	2	95	44	18	159

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.