Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2016-10959 1 Estatik 1 Estatik 2024-11-21 6.5 Medium
The estatik plugin before 2.3.1 for WordPress has authenticated arbitrary file upload (exploitable with CSRF) via es_media_images[] to wp-admin/admin-ajax.php.
CVE-2016-10958 1 Estatik 1 Estatik 2024-11-21 7.5 High
The estatik plugin before 2.3.0 for WordPress has unauthenticated arbitrary file upload via es_media_images[] to wp-admin/admin-ajax.php.