WordPress Plugin Vulnerabilities

Showbiz Pro <= 1.7.1 - Shell Upload

Description

The showbizpro WordPress plugin was affected by a Shell Upload security vulnerability.

Affects Plugins

Plugin icon
showbizpro
No known fix

References

CVE
CVE-2015-9499
Exploitdb
35385
URL
https://github.com/espreto/wpsploit/blob/master/modules/exploits/unix/webapp/wp_showbiz_file_upload.rb

Miscellaneous

Submitter
firefart
Submitter website
https://firefart.at/
Submitter twitter
_FireFart_
Verified
No
WPVDB ID
1c8f1872-a699-464a-9c6b-f8a49ca22ecb

Timeline

Publicly Published
2015-05-03 (about 11 years ago)
Added
2015-05-03 (about 11 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2025-02-04
Title
Contact Manager < 8.6.5 - Unauthenticated Arbitrary Double File Extension Upload
Published
2022-04-21
Title
VikBooking Hotel Booking Engine & PMS < 1.5.8 - Admin+ PHP File Upload
Published
2024-11-13
Title
B-Banner Slider <= 1.1 - Authenticated (Subscriber+) Arbitrary File Upload
Published
2023-12-27
Title
WP Mail Log Plugin < 1.1.3 - Contributor+ Arbitrary File Upload
Published
2019-05-07
Title
WP Live Chat Support Pro - File Upload Bypass