WordPress Plugin Vulnerabilities

Webapp builder 2.0 - Unauthenticated File Upload

Description

Plugin is still affected and has been closed.

Affects Plugins

Plugin icon
webapp-builder
No known fix

References

CVE
CVE-2017-1002002
Exploitdb
41540
URL
https://seclists.org/oss-sec/2017/q1/560
URL
http://www.vapidlabs.com/advisory.php?v=181

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
3fef069c-e2a4-4076-ab05-cfb5c591dc1c

Timeline

Publicly Published
2017-03-07 (about 9 years ago)
Added
2017-03-08 (about 9 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2026-04-17
Title
CMP < 4.1.17 - Admin+ Arbitrary File Upload and Remote Code Execution
Published
2017-03-06
Title
mobile-friendly-app-builder-by-easytouch 3.0 - Unauthenticated File Upload
Published
2021-10-21
Title
Envato Elements < 2.0.11 - Contributor+ Arbitrary File Upload
Published
2014-08-01
Title
Cold Fusion - Arbitrary File Upload
Published
2024-10-30
Title
Stars SMTP Mailer < 2.1.6 - Authenticated (Subscriber+) Arbitrary File Upload