WordPress Plugin Vulnerabilities

Extend 1.3.7 - Shell Upload

Description

The extend-wordpress WordPress plugin was affected by a Shell Upload security vulnerability.

Affects Plugins

Plugin icon
extend-wordpress
No known fix

References

CVE
CVE-2011-4106
Exploitdb
17872

Miscellaneous

Verified
No
WPVDB ID
4ac8fa0d-c231-437d-8489-b9d233fd193a

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2022-09-05
Title
CM Download Manager < 2.8.6 - Admin+ Arbitrary File Upload
Published
2022-03-01
Title
Sermon Browser <= 0.45.22 - Arbitrary File Upload via CSRF
Published
2023-11-27
Title
BookingPress < 1.0.77 - Authenticated (Administrator+) Arbitrary File Upload
Published
2024-10-21
Title
Custom Icons for Elementor < 0.3.4 - Authenticated (Admin+) Arbitrary File Upload
Published
2022-07-18
Title
Directorist - Business Directory Plugin < 7.2.3 - Admin+ Arbitrary File Upload