medium6.5
CVE-2014-5324
Unrestricted file upload vulnerability in the N-Media file uploader plugin before 3.4 for WordPress allows remote authenticated users to execute arbitrary PHP …
Impact
Unrestricted file upload vulnerability in the N-Media file uploader plugin before 3.4 for WordPress allows remote authenticated users to execute arbitrary PHP code by leveraging Author privileges to store a file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Najeebmedia | N-Media File Uploader | through 3.3 Versions 3.0, 3.1, 3.2 |