Lucene search
WpvulndbWPVDB-ID:7D1EAD56-7DB2-46C4-97ED-AF008E9B5515HistoryNov 15, 2023 - 12:00 a.m.
Forminator < 1.28.0 - Admin+ Arbitrary File Upload
2023-11-1500:00:00
wpscan.com
6
security
file upload
blacklisting
rce
htaccess
administrator
forminator plugin
Description The plugin does not properly blacklist files via the forminator_allowed_mime_types function, which could allow administrator to upload arbitrary file. However, RCE can not be achieved due to htaccess configuration.
Related
prion
prion
Design/Logic Flaw
2023-11-15 07:15:00
nvd
nvd
CVE-2023-6133
2023-11-15 07:15:14
cve
cve
CVE-2023-6133
2023-11-15 07:15:14
cvelist
cvelist
CVE-2023-6133
2023-11-15 06:40:46
openvas
openvas
WordPress Forminator Plugin < 1.28.0 Arbitrary File Upload Vulnerability
2023-11-21 00:00:00
wordfence
wordfence
AI Score
7.2
Confidence
Low
EPSS
0.001
Percentile
31.8%
Related for WPVDB-ID:7D1EAD56-7DB2-46C4-97ED-AF008E9B5515