Description
WordPress Plugin PHP Speedy is prone to a vulnerability that lets remote attackers execute arbitrary code because the application fails to sanitize user-supplied input. Attackers can exploit this issue to execute arbitrary PHP code within the context of the affected webserver process. WordPress Plugin PHP Speedy versions 0.5.2 and prior are vulnerable; other versions may also be affected.
Remediation
Edit the source code to ensure that input is properly sanitised and verified or disable the plugin until a fix is available
References
Related Vulnerabilities
WordPress Plugin Contact Form Submissions Unspecified Vulnerability (1.2)
WordPress Plugin Child Themes Helper Multiple Vulnerabilities (2.0)
WordPress Plugin JobSearch WP Job Board Cross-Site Scripting (1.5.2)
WordPress Plugin WordPress Shortcodes-Shortcodes Ultimate Cross-Site Scripting (5.0.6)
WordPress Plugin Nextend Twitter Connect Cross-Site Scripting (1.5.1)