Monsters Editor for WP Super Edit, d0a81ab1a31e3174652a37b761ad1d8c6f260569

CVE, Research URL: d0a81ab1a31e3174652a37b761ad1d8c6f260569
Home page URL: Security reports for Monsters Editor for WP Super Edit
Application: Monsters Editor for WP Super Edit
Published on: Aug 22, 2012
Research Description: Monsters Editor for WP Super Edit [monsters-editor-10-for-wp-super-edit] <= 1.1 (unfixed + closed) Monsters Editor for WP Super Edit <= 1.1 - Arbitrary File Upload The Monsters Editor plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'test.html' page in versions up to, and including, 1.1. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.
Affected versions: max 1.1.
Status: vulnerable