WordPress Plugin Vulnerabilities

User Photo - Component Remote File Upload

Description

The User Photo WordPress plugin was affected by a Component Remote File Upload security vulnerability.

Affects Plugins

Plugin icon
user-photo
Fixed in 0.9.5

References

CVE
CVE-2013-1916
Exploitdb
16181

Miscellaneous

Verified
No
WPVDB ID
0b2f8897-e14f-4a9b-b261-07803b4e8f60

Timeline

Publicly Published
2011-02-17 (about 15 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2014-08-01
Title
PDW File Browser - upload.php Arbitrary File Upload
Published
2014-08-01
Title
Premium Gallery Manager - Shell Upload
Published
2025-04-03
Title
Woffice Core < 5.4.22 - Authenticated (Subscriber+) Arbitrary File Upload
Published
2012-06-07
Title
MM Forms & MM Forms Community 2.2.6 - Unauthenticated Arbitrary File Upload
Published
2023-12-27
Title
Piotnet Forms Plugin < 1.0.29 - Unauthenticated Arbitrary File Upload