My Account Page Editor vulnerabilities
We track 1 vulnerability in My Account Page Editor products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on January 16, 2024.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest My Account Page Editor vulnerabilities
- 8.8 High severity
My Account Page Editor: Unrestricted Upload of File with Dangerous Type
The My Account Page Editor WordPress plugin before 1.3.2 does not validate the profile picture to be uploaded, allowing any authenticated users, such as subscriber to upload arbitrary files to the server, leading to RCE