Vulnerabilities and Security Researches

Pixabay Images, CVE-2015-1376

CVE, Research URL: CVE-2015-1376
Home page URL: Security reports for Pixabay Images
Application: Pixabay Images
Published on: Jan 28, 2015
Research Description: pixabay-images.php in the Pixabay Images plugin before 2.4 for WordPress does not validate hostnames, which allows remote authenticated users to write to arbitrary files via an upload URL with a host other than pixabay.com.
Affected versions: Min -, max 2.4.
Status: vulnerable