Attachment Manager, db3f647bdb78ac3164c77feb81fca03ce01edf2c

CVE, Research URL: db3f647bdb78ac3164c77feb81fca03ce01edf2c
Home page URL: Security reports for Attachment Manager
Application: Attachment Manager
Published on: Aug 16, 2017
Research Description: Attachment Manager [attachment-manager] < 2.1.2 WordPress Attachment Manager Plugin <= 2.1.1 - Arbitrary File Upload Vulnerability WordPress Attachment Manager Plugin Arbitrary File Upload Vulnerability is prone to a Arbitrary File Upload Vulnerability. In the function hande_actions(), it's missing an additional check for "page" and "wam_add_icon" GET variables. Update the plugin.
Affected versions: Min -, max 2.1.2.
Status: vulnerable