AngelCtulhu

1 exploit Active since Apr 2019
CVE-2019-11223 NOMISEC CRITICAL WORKING POC
SupportCandy < 2.0.0 - Unauthenticated Arbitrary File Upload and Remote Code Execution
An Unrestricted File Upload Vulnerability in the SupportCandy plugin through 2.0.0 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension.
3 stars
CVSS 9.8