https://secupress.me/blog/wps-cleaner-v1-4-4-multiples-vulnerabilities/
WPS Limit Login is edited by WP Serveur, WordPress french host. Criticity level for this update is high. Disclose File : /classes/plugin.php Line 1070 : $files = esc_attr( $_POST[‘files’] ); Issue : No control of the sent IDs to be sure they are attached media so we can change IDs to select any other (private […]
The post WPS Cleaner v1.4.4 Multiples Vulnerabilities appeared first on SecuPress.
Source: Security Feed