Themes Vulnerabilities

DesignFolio Plus Theme <= 1.2 - Arbitrary File Upload

Description

Vulnerable File : upload-file.php

Affects Themes

designfolio-plus
No known fix

References

Exploitdb
36372
URL
https://packetstormsecurity.com/files/#131244/
URL
https://github.com/UpThemes/DesignFolio-Plus

Miscellaneous

Submitter
CrashBandicot
Submitter website
http://github.com/CCrashBandicot
Submitter twitter
DosPerl
Verified
No
WPVDB ID
050d899c-bd1d-4a7c-a8a7-b5f81b9aa3f2

Timeline

Publicly Published
2015-03-04 (about 11 years ago)
Added
2015-04-02 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2014-08-01
Title
Work The Flow File Upload < 2.4 - wp-admin/admin-ajax.php accept_file_types Parameter Manipulation File Upload Restriction Bypass
Published
2025-05-20
Title
Hospital Management System <= 47.0(20-11-2023) - Authenticated (Subscriber+) Arbitrary File Upload
Published
2014-08-01
Title
wp-homepage-slideshow - Arbitrary File Upload
Published
2014-08-01
Title
RBX Gallery 2.1 - uploader.php File Upload PHP Code Execution
Published
2025-01-03
Title
Fancy Product Designer < 6.4.4 - Unauthenticated Arbitrary File Upload