WordPress Plugin Vulnerabilities

PDW File Browser - upload.php Arbitrary File Upload

Description

The pdw-file-browser WordPress plugin was affected by an upload.php Arbitrary File Upload security vulnerability.

Affects Plugins

Plugin icon
pdw-file-browser
No known fix

References

Miscellaneous

Verified
No
WPVDB ID
2560bcb0-bbd6-4fbb-9d85-9b483ab579a4

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2024-08-16
Title
Metform Elementor Contact Form Builder < 3.3.0 - Unauthenticated Double-Extension Arbitrary File Upload
Published
2021-01-28
Title
Super Forms < 4.9.703 - Unauthenticated PHP File Upload to RCE
Published
2023-10-10
Title
User Submitted Posts < 20230914 - Unauthenticated Arbitrary File Upload
Published
2024-06-28
Title
Newspack Blocks < 3.0.9 - Authenticated (Contributor+) Arbitrary File Upload
Published
2025-05-16
Title
Printcart Web to Print Product Designer for WooCommerce < 2.4.0 - Unauthenticated Arbitrary File Upload