diff --git a/data/plugin_vulns.xml b/data/plugin_vulns.xml index 695f5b47..3a9fa0d1 100644 --- a/data/plugin_vulns.xml +++ b/data/plugin_vulns.xml @@ -11697,6 +11697,14 @@ + + WPtouch 3.x - Insecure Nonce Generation + + http://blog.sucuri.net/2014/07/disclosure-insecure-nonce-generation-in-wptouch.html + + UPLOAD + 3.4.3 + WPtouch 1.9.8 - ajax/file_upload.php Crafted Content-Type File Upload Remote Code Execution