WordPress Plugin Vulnerabilities

File Uploader - PHP File Upload

Description

The wp-file-uploader WordPress plugin was affected by a PHP File Upload security vulnerability.

Affects Plugins

Plugin icon
wp-file-uploader
No known fix

References

URL
https://web.archive.org/web/20130820120907/https://la.usch.io/2013/01/21/wordpress-file-uploader-plugin-php-file-upload-vulnerability/

Miscellaneous

Verified
No
WPVDB ID
365064c9-7d51-4009-953c-782f2ff1fee8

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2014-10-23
Title
Creative Contact Form < 1.0.0 - Shell Upload
Published
2014-08-01
Title
A Gallery 0.9 - Shell Upload
Published
2025-07-04
Title
Bulk Featured Image <= 1.2.2 - Authenticated (Admin+) Arbitrary File Upload
Published
2022-03-14
Title
Library File Manager < 5.2.3 - Subscriber+ Arbitrary File Creation/Upload/Deletion
Published
2023-08-28
Title
Prevent files / folders access < 2.5.2 - Admin+ Arbitrary File Upload