WordPress Plugin Vulnerabilities

Ultimate Product Catalog < 5.0.0 - Authenticated (Contributor+) Arbitrary File Upload

Description

The Ultimate Product Catalog plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 4.4.48. This makes it possible for authenticated attackers, with Contributor-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible.

Affects Plugins

Plugin icon
ultimate-product-catalogue
Fixed in 5.0.0

References

CVE
CVE-2016-20075
URL
https://www.wordfence.com/threat-intel/vulnerabilities/id/3b6ae26e-9262-4241-81d1-d5522bd35345

Miscellaneous

Original Researcher
Joaquin Ramirez Martinez
Verified
No
WPVDB ID
6d46a5c3-c3a7-4d24-b4f3-042610ebd276

Timeline

Publicly Published
2026-06-15 (about 2 months ago)
Added
2026-07-29 (about 1 month ago)
Last Updated
2026-08-18 (about 25 days ago)

Other

Published
Title
Published
2024-10-04
Title
Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress < 6.5.8 - Authenticated (Subscriber+) Limited JavaScript File Upload
Published
2023-10-09
Title
Royal Elementor Addons and Templates 1.4.78 - Unauthenticated Arbitrary File Upload
Published
2025-10-28
Title
Contact Form 7 PDF, Google Sheet & Database < 3.1.0 - Authenticated (Subscriber+) Arbitrary File Upload
Published
2025-10-31
Title
Delicious Recipes < 1.9.1 - Authenticated (Contributor+) Arbitrary File Upload
Published
2024-02-14
Title
WooCommerce Easy Checkout Field Editor, Fees & Discounts < 3.5.13 - Unauthenticated Arbitrary File Upload