WordPress Plugin Vulnerabilities

Audio Record 1.0 - Arbitrary File Upload

Description

Unrestricted file upload in record upload process allowing arbitrary extension.

Affects Plugins

Plugin icon
audio-record
No known fix

References

Exploitdb
46055
URL
https://wordpress.org/plugins/audio-record/

Miscellaneous

Original Researcher
Kaimi
Submitter
Javier Casares
Submitter website
https://www.javiercasares.com/
Submitter twitter
JavierCasares
Verified
No
WPVDB ID
67a84c3d-8c2a-4b12-a0b8-f97741b6c6f2

Timeline

Publicly Published
2018-12-24 (about 7 years ago)
Added
2019-01-07 (about 7 years ago)
Last Updated
2019-11-01 (about 6 years ago)

Other

Published
Title
Published
2025-06-11
Title
Ovatheme Events Manager < 1.8.5 - Unauthenticated Arbitrary File Upload
Published
2016-02-15
Title
Backup Guard < 1.0.3 - Authenticated Arbitrary File Upload
Published
2025-05-14
Title
百度站长SEO合集(支持百度/神马/Bing/头条推送) < 2.0.7 - Unauthenticated Arbitrary File Upload
Published
2024-06-18
Title
Squeeze < 1.4.1 - Authenticated (Admin+) Arbitrary File Upload
Published
2021-04-11
Title
Business Directory Plugin < 5.11.1 - Authenticated PHP4 Upload to RCE