WordPress Plugin Vulnerabilities

Omni Secure Files 0.1.13 - Unauthenticated Arbitrary File Upload

Description

This plugin came with the vulnerable plupload library and has been seen exploited in the wild.

Proof of Concept

Affects Plugins

Plugin icon
omni-secure-files
No known fix

References

Exploitdb
19009

Miscellaneous

Original Researcher
Adrien Thierry
Verified
No
WPVDB ID
376fd666-6471-479c-9b74-1d8088a33e89

Timeline

Publicly Published
2012-06-07 (about 13 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2020-03-02 (about 5 years ago)

Other

Published
Title
Published
2022-11-21
Title
Booking Calendar < 3.2.2 - Unauthenticated Arbitrary File Upload
Published
2024-10-25
Title
Sudan Payment Gateway for WooCommerce <= 1.2.2 - Unauthenticated Arbitrary File Upload
Published
2024-10-04
Title
Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress < 6.5.8 - Authenticated (Subscriber+) Limited JavaScript File Upload
Published
2024-04-19
Title
Royal Elementor Addons and Templates < 1.3.95 - Unauthenticated Limited File Upload
Published
2025-02-21
Title
WPvivid < 0.9.113 - Admin+ Arbitrary File Upload