WordPress MailCWP plugin 'mailcwp-upload. php' Arbitrary File upload Vulnerability

WordPress MailCWP plugin 'mailcwp-upload. php' Arbitrary File upload Vulnerability
WordPress MailCWP plugin 'mailcwp-upload. php' Arbitrary File upload Vulnerability

Release date:
Updated on:

Affected Systems:

WordPress MailCWP

Description:

Bugtraq id: 76028

The MailCWP plug-in allows you to directly access emails through a WordPress blog or website.

The MailCWP plugin has the Arbitrary File upload Vulnerability in 'mailcwp-upload. php'. Attackers can exploit this vulnerability to upload arbitrary files to the affected computer.

<* Source: Larry W. Cashdollar (lwc@vapid.dhs.org)
*>

Suggestion:

Vendor patch:

WordPress
---------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Https://wordpress.org/plugins/mailcwp/

This article permanently updates the link address: