CVE request: WordPress plugin wysija-newsletters remote file upload

[Henri Salo <henri () nerv fi>]

Can I get 2014 CVE for remote file upload vulnerability in WordPress plugin
wysija-newsletters, thanks.

Plugin name: MailPoet Newsletters
Plugin page: https://wordpress.org/plugins/wysija-newsletters/
Fixed in: 2.6.7
Discovered and reported by Sucuri

Reference:
http://blog.sucuri.net/2014/07/remote-file-upload-vulnerability-on-mailpoet-wysija-newsletters.html

Also detected by wpscan-tool:
https://github.com/wpscanteam/wpscan/commit/f9b10dc9db45f400918348b777f662c7140ee5fe

I can provide diffs between the versions if needed.

---
Henri Salo

Attachment: signature.asc
Description: Digital signature