WordPress Plugin Vulnerabilities
Formidable Forms Pro < 1.06.03 - Arbitrary File Upload via ofc_upload_image.php
Description
The plugin was using a vulnerable library, Open Flash Cart, which lead to an arbitrary file upload issue via the pro/js/ofc-library/ofc_upload_image.php file
Affects Plugins
Fixed in 1.06.03 References
Classification
Type
RCE
OWASP top 10
CWE
CVSS
Miscellaneous
Verified
Yes
WPVDB ID
Timeline
Publicly Published
2014-05-11 (about 12 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2021-03-29 (about 5 years ago)
WPScan 