WordPress Plugin Vulnerabilities

Front End Upload <= 0.5.4.4 - Arbitrary File Upload

Description

The front-end-upload WordPress plugin was affected by an Arbitrary File Upload security vulnerability.

Affects Plugins

Plugin icon
front-end-upload
Fixed in 0.5.4.5

References

Exploitdb
19008
Exploitdb
20083
URL
https://packetstormsecurity.com/files/#113410/
URL
https://web.archive.org/web/20140730211332/https://www.opensyscom.fr/Actualites/wordpress-plugins-front-end-upload-shell-upload-vulnerability.html

Miscellaneous

Submitter
erwanlr
Verified
No
WPVDB ID
1738f287-c8fb-4d5d-868c-f31245b13c55

Timeline

Publicly Published
2012-06-02 (about 13 years ago)
Added
2014-09-19 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2012-01-06
Title
FCChat 2.2.11-2.2.13 - Upload.php Arbitrary File Upload
Published
2024-01-08
Title
Barcode Scanner with Inventory & Order Manager < 1.5.2 - Unauthenticated Arbitrary File Upload via uploadFile
Published
2026-04-21
Title
GeekyBot — AI Copilot, Chatbot, WooCommerce Lead Gen & Zero-Prompt Content < 1.2.3 - Unauthenticated Arbitrary File Upload
Published
2025-09-16
Title
StoreEngine – Powerful WordPress eCommerce Plugin for Payments, Memberships, Affiliates, Sales & More < 1.5.1 - Authenticated (Subscriber+) Arbitrary File Upload
Published
2014-08-01
Title
Kiddo - remote shell upload