WordPress Plugin Vulnerabilities

open-flash-chart-core - ofc_upload_image.php Arbitrary File Upload

Description

The open-flash-chart-core WordPress plugin was affected by an ofc_upload_image.php Arbitrary File Upload security vulnerability.

Affects Plugins

Plugin icon
open-flash-chart-core-wordpress-plugin
Fixed in 0.5

References

CVE
CVE-2009-4140
Exploitdb
24492
URL
exploit/unix/webapp/open_flash_chart_upload_exec

Miscellaneous

Verified
No
WPVDB ID
a1eee339-e03c-4fe7-b1e3-d63c687a3acc

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2021-10-05
Title
MStore API < 3.4.5 - Unauthenticated PHP File Upload
Published
2025-12-19
Title
File Uploader for WooCommerce < 1.0.4 - Unauthenticated Arbitrary File Upload via add-image-data
Published
2024-06-18
Title
AliExpress Dropshipping with AliNext Lite < 3.3.6 - Authenticated (Subscriber+) Arbitrary File Upload
Published
2014-08-01
Title
Font Uploader 1.2.4 - Arbitrary File Upload
Published
2025-04-08
Title
Processing Projects <= 1.0.2 - Authenticated (Shop Manager+) Arbitrary File Upload