CVE-2015-1375

pixabay-images.php in the Pixabay Images plugin before 2.4 for WordPress does not properly restrict access to the upload functionality, which allows remote attackers to write to arbitrary files.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

12.25% chance of exploitation in the next 30 days, 96th percentile

Published

2015-01-28

Updated

2024-08-06

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/35846

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/35846

References

• CVE Record
• NVD entry

Related

• CVE-2015-1374
• CVE-2015-1376
• CVE-2015-1373
• CVE-2015-1386
• CVE-2015-1372
• CVE-2015-1389