WordPress Plugin Vulnerabilities

User Meta Version 1.1.1 - Arbitrary File Upload

Description

The User Meta – User Profile Builder and User management plugin WordPress plugin was affected by an Arbitrary File Upload security vulnerability.

Affects Plugins

Plugin icon
user-meta
Fixed in 1.1.2

References

Exploitdb
19052

Miscellaneous

Verified
No
WPVDB ID
12ecc23f-4d68-4cd6-bbf5-51aa69009ea1

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2024-07-03
Title
IMGspider < 2.3.11 - Authenticated (Contributor+) Arbitrary File Upload via 'upload_img_file'
Published
2025-12-01
Title
SureMail < 1.9.1 - Unauthenticated Arbitrary File Upload
Published
2024-07-23
Title
Social Auto Poster < 5.3.15 - Authenticated (Contributor+) Arbitrary File Upload
Published
2015-02-22
Title
Holding Pattern Theme <= 0.6 - Arbitrary File Upload
Published
2024-09-09
Title
Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress < 6.5.6 - Authenticated (Subscriber+) Arbitrary File Upload