WordPress Plugin Vulnerabilities

Smart Slideshow - upload.php Multiple File Extension Upload Arbitrary Code Execution

Description

The smart-slide-show WordPress plugin was affected by an upload.php Multiple File Extension Upload Arbitrary Code Execution security vulnerability.

Affects Plugins

Plugin icon
smart-slide-show
No known fix

References

Miscellaneous

Verified
No
WPVDB ID
980dded4-27cd-4ed6-8442-5e66c0390616

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2020-02-29 (about 6 years ago)

Other

Published
Title
Published
2026-04-17
Title
Drag and Drop Multiple File Upload for Contact Form 7 < 1.3.9.7 - Unauthenticated Arbitrary File Upload via Non-ASCII Filename Blacklist Bypass
Published
2024-10-17
Title
Nice Backgrounds <= 1.0 - Authenticated (Subscriber+) Arbitrary File Upload
Published
2025-06-17
Title
Pixabay Images <= 3.4 - Authenticated (Author+) Arbitrary File Upload
Published
2023-12-27
Title
Frontend Admin by DynamiApps Plugin < 3.18.4 - Unauthenticated Arbitrary File Upload
Published
2025-03-06
Title
Solace Extra < 1.3.1 - Subscriber+ Arbitrary File Upload