WordPress Plugin Vulnerabilities

php-analytics - ofc_upload_image.php Arbitrary File Upload

Description

The php-analytics WordPress plugin was affected by an ofc_upload_image.php Arbitrary File Upload security vulnerability.

Affects Plugins

Plugin icon
php-analytics
No known fix

References

CVE
CVE-2009-4140
Exploitdb
24492
URL
exploit/unix/webapp/open_flash_chart_upload_exec

Miscellaneous

Verified
No
WPVDB ID
7639db38-008b-48ca-992c-634dadbfbdc1

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-11-01 (about 6 years ago)

Other

Published
Title
Published
2025-01-16
Title
Advanced File Manager 5.2.12 - 5.2.13 - Subscriber+ Arbitrary File Upload
Published
2023-11-01
Title
Icons Font Loader < 1.1.3 - Admin+ Arbitrary File Upload
Published
2025-06-17
Title
Ultimate Addons for Contact Form 7 < 3.5.13 - Authenticated (Administrator+) Arbitrary File Upload via 'save_options'
Published
2025-09-06
Title
Kallyas < 4.23.0 - Authenticated (Contributor+) Arbitrary File Upload
Published
2024-10-30
Title
RSVPMaker for Toastmasters < 6.2.5 - Unauthenticated Arbitrary File Upload