Themes Vulnerabilities

GeoPlaces - File Upload H&ling Remote Comm& Execution

Affects Themes

geoplaces4
No known fix
geoplaces4beta
No known fix

References

URL
https://packetstormsecurity.com/files/#123773/

Classification

Type
RCE
OWASP top 10
A1: Injection
CWE
CWE-94

Miscellaneous

Verified
No
WPVDB ID
7bd83d06-72ee-4774-bae7-c14ec5284dea

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2024-05-01
Title
Booster for WooCommerce < 7.1.9 - Unauthenticated Arbitrary Shortcode Execution
Published
2025-01-06
Title
SEO LAT Auto Post <= 2.2.1 - Missing Authorization to File Overwrite/Upload (Remote Code Execution)
Published
2025-04-01
Title
DigiWidgets Image Editor <= 1.10 - Unauthenticated Remote Code Execution
Published
2014-08-01
Title
W3 Total Cache - Remote Code Execution
Published
2005-06-29
Title
WordPress <= 1.5.1.2 - XML-RPC Eval Injection