WordPress Plugin Vulnerabilities

wp-seo-spy-google - ofc_upload_image.php Arbitrary File Upload

Description

The wp-seo-spy-google WordPress plugin was affected by an ofc_upload_image.php Arbitrary File Upload security vulnerability.

Affects Plugins

Plugin icon
wp-seo-spy-google
No known fix

References

CVE
CVE-2009-4140
Exploitdb
24492
URL
exploit/unix/webapp/open_flash_chart_upload_exec

Miscellaneous

Verified
No
WPVDB ID
6f7e415c-ac79-4a9a-9efe-5629bcae1887

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-11-01 (about 6 years ago)

Other

Published
Title
Published
2022-11-28
Title
JobBoardWP < 1.2.2 - Unauthenticated Arbitrary File Upload
Published
2025-08-21
Title
Portfolio Manager Pro 3.8 - Unauthenticated Arbitrary File Upload
Published
2021-01-20
Title
123ContactForm for WordPress <= 1.5.6 - Unauthenticated Arbitrary File Upload
Published
2024-07-08
Title
Gutenberg Forms <= 2.2.9 - Unauthenticated Arbitrary File Upload
Published
2025-07-11
Title
Medical Prescription Attachment Plugin for WooCommerce <= 1.2.3 - Unauthenticated Arbitrary File Upload