WordPress Plugin Vulnerabilities

Uploadify 1.0 - Unauthenticated Arbitrary File Upload

Description

This vulnerability has been seen exploited in the wild.

Affects Plugins

Plugin icon
uploadify
No known fix

References

URL
https://packetstormsecurity.com/files/#98652/

Classification

Type
RFI
OWASP top 10
A1: Injection
CWE
CWE-98

Miscellaneous

Original Researcher
GotGeek Labs
Verified
No
WPVDB ID
6946364c-9764-468e-87d5-2dd57e531985

Timeline

Publicly Published
2011-02-21 (about 14 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2020-02-20 (about 5 years ago)

Other

Published
Title
Published
2025-06-09
Title
Avaz <= 2.8 - Unauthenticated Local File Inclusion
Published
2025-04-21
Title
Grace Mag <= 1.1.5 - Unauthenticated Local File Inclusion
Published
2025-07-22
Title
Caliris < 1.6 - Unauthenticated Local File Inclusion
Published
2014-08-01
Title
Simple Fields 0.3.5 - Remote File Inclusion
Published
2025-12-31
Title
DiveIt <= 1.4.3 - Unauthenticated Local File Inclusion