Themes Vulnerabilities

DailyDeal - File Upload Remote Code Execution

Description

The dailydeal WordPress theme was affected by a File Upload Remote Code Execution security vulnerability.

Affects Themes

dailydeal
No known fix

References

URL
https://packetstormsecurity.com/files/#123748/
URL
https://templatic.com/wordpress-coupon-deal-themes/daily-deal/

Classification

Type
RCE
OWASP top 10
A1: Injection
CWE
CWE-94

Miscellaneous

Verified
No
WPVDB ID
021a497f-965a-418b-a049-7e6928843412

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2024-04-25
Title
Customify Site Library <= 0.0.9 - Unauthenticated Remote Code Execution
Published
2014-09-16
Title
WordPress 3.9 & 3.9.1 Unlikely Code Execution
Published
2026-03-05
Title
WP All Import < 4.0.1 - Reflected Cross-Site Scripting via 'filepath'
Published
2026-04-22
Title
Blocksy Companion Pro < 2.1.38 - Authenticated (Contributor+) Remote Code Execution
Published
2022-11-29
Title
Menu Item Visibility Control <= 0.5 - Admin+ Arbitrary PHP Code Execution