CVE-2016-1000112

Critical

Published: 06/10/2016(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The contus-video-comments plugin version 1.0 for WordPress allows unauthenticated remote .jpg file uploads.

An attacker could exploit this vulnerability to upload malicious files, potentially leading to full control over the website.

It is recommended to update the plugin to the latest version or remove it to mitigate the risk.

Original NVD description (English source)

Unauthenticated remote .jpg file upload in contus-video-comments v1.0 wordpress plugin