Themes Vulnerabilities

Kernel Theme - functions/upload-h&ler.php File Upload Remote Code Execution

Description

The kernel-theme WordPress theme was affected by a functions/upload-h&ler.php File Upload Remote Code Execution security vulnerability.

Affects Themes

kernel-theme
No known fix

References

Exploitdb
29482
URL
https://packetstormsecurity.com/files/#123954/

Classification

Type
RCE
OWASP top 10
A1: Injection
CWE
CWE-94

Miscellaneous

Verified
No
WPVDB ID
3dbb3b02-e028-4dd8-b601-ef5cfb60ae55

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2014-08-01
Title
EZPZ One Click Backup <= 12.03.10 - Unauthenticated Command Execution
Published
2022-10-14
Title
WP All Import < 3.6.9 - Admin+ Arbitrary File Upload to RCE
Published
2017-08-26
Title
Multiple Plugins - Unauthenticated RCE via PHPUnit
Published
2020-01-21
Title
AccessAlly < 3.3.2 - Unauthenticated Arbitrary PHP Code Execution
Published
2021-12-05
Title
WP Coder < 2.5.2 - RFI leading to RCE via CSRF