Security Advisory

CVE-2019-11223

9.8
CRITICAL

Vulnerability Description

An Unrestricted File Upload Vulnerability in the SupportCandy plugin through 2.0.0 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension.
Published Date April 18, 2019
Official Source NIST NVD Advisory