WordPress Plugin Vulnerabilities

WP Property <= 1.35.0 - Arbitrary File Upload

Description

The WP-Property – WordPress Powered Real Estate and Property Management WordPress plugin was affected by an Arbitrary File Upload security vulnerability.

Affects Plugins

Plugin icon
wp-property
Fixed in 1.35.1

References

Exploitdb
18987
Exploitdb
23651
URL
exploit/unix/webapp/wp_property_upload_exec
URL
https://packetstormsecurity.com/files/#113274/

Miscellaneous

Verified
Yes
WPVDB ID
7d2c5953-4ce6-40b4-938a-56e3669d04c7

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2016-06-03
Title
WP Mobile Detector < 3.6 - Unauthenticated Arbitrary File Upload
Published
2024-03-29
Title
Shortcode Addons <= 3.2.5 - Authenticated (Admin+) Arbitrary File Upload
Published
2024-11-05
Title
WP JobSearch < 2.6.8 - Authenticated (Subscriber+) Arbitrary File Upload
Published
2026-02-11
Title
Bravis Addons < 1.3.0 - Authenticated (Subscriber+) Arbitrary File Upload
Published
2022-10-28
Title
Api2Cart Bridge Connector < 1.2.0 - Unauthenticated Arbitrary File Upload