The SEO LAT Auto Post plugin for WordPress is vulnerable to file overwrite due to a missing capability check on the remote_update AJAX action in all versions up to, and including, 2.2.1. This makes it possible for unauthenticated attackers to overwrite the seo-beginner-auto-post.php file which can be leveraged to achieve remote code execution.

TruthFinder


Official TruthFinder website. Try our People Search, Reverse Phone Lookup, or Address Lookup today to search people online. It's simple to get started, just enter a name or phone number and click search. Social Media, Photos, Police Records, Background Checks, Civil Judgments, Contact Information and Much More!

Listed: