Approved changes feed: RSS · Atom

cpe:2.3:a:wp_mobile_detector_project:wp_mobile_detector:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorWp Mobile Detector Project (b439e689-8ea9-5929-b39b-023e97b75ae6)
ProductWp Mobile Detector (5b42343e-3be8-5157-99c3-e736c44c9c27)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/common-repository/wp-mobile-detector purl2cpe 2026-07-28 16:41:17.425503
pkg:github/wp-plugins/wp-mobile-detector purl2cpe 2026-06-01 10:18:12.311286
pkg:github/wpplugins/wptap-mobile-detector purl2cpe 2026-06-01 10:18:12.311289

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-15043 vulnerable 2026-06-08 05:07:26.255974 WP Mobile Detector <= 3.5 - Arbitrary File Upload
CRITICAL (9.8)
The WP Mobile Detector plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in resize.php file in versions up to, and including, 3.5. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected sites server which may make remote code execution possible.
Published: 2025-07-19T09:23:52.395Z
Updated: 2026-04-08T16:55:01.500Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.