WordPress Plugin Vulnerabilities

TDO Mini Forms 0.13.9 - tdomf-upload-inline.php File Upload Remote Code Execution

Description

The tdo-mini-forms WordPress plugin was affected by a tdomf-upload-inline.php File Upload Remote Code Execution security vulnerability.

Affects Plugins

Plugin icon
tdo-mini-forms
No known fix

References

URL
https://packetstormsecurity.com/files/#124352/

Classification

Type
RCE
OWASP top 10
A1: Injection
CWE
CWE-94

Miscellaneous

Verified
No
WPVDB ID
a6fda18b-2950-49ed-b609-b39559044c71

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2025-02-24
Title
Ark Theme Core < 1.71.0 - Unauthenticated Remote Code Execution
Published
2015-09-14
Title
EZ SQL Reports < 4.11.37 - Authenticated Arbitrary Code Execution
Published
2023-08-03
Title
WP Ultimate CSV Importer < 7.9.9 - Author+ RCE
Published
2021-12-05
Title
Button Generator < 2.3.3 - RFI leading to RCE via CSRF
Published
2021-03-16
Title
WP Super Cache < 1.7.2 - Authenticated Remote Code Execution (RCE)