WordPress Plugin Vulnerabilities

Xerte Online <= 0.35 - File Upload

Description

The Xerte Online WordPress plugin was affected by a File Upload security vulnerability.

Affects Plugins

Plugin icon
xerte-online
Fixed in 0.36

References

URL
https://packetstormsecurity.com/files/#119220/
URL
https://github.com/espreto/wpsploit/blob/master/modules/exploits/unix/webapp/wp_xerteonline_file_upload.rb
URL
https://plugins.trac.wordpress.org/changeset/671963/xerte-online
URL
https://plugins.trac.wordpress.org/changeset/658315/xerte-online

Miscellaneous

Verified
No
WPVDB ID
adffd596-5c29-44d7-9b98-b31296c98df5

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-11-01 (about 6 years ago)

Other

Published
Title
Published
2025-05-12
Title
TheGem < 5.10.3.1 - Authenticated (Subscriber+) Arbitrary File Upload
Published
2024-07-17
Title
Brizy – Page Builder < 2.4.45 - Authenticated (Contributor+) Arbitrary File Upload
Published
2024-12-17
Title
WPLMS < 1.9.9.5.2 - Authenticated (Contributor+) Arbitrary File Upload
Published
2014-08-01
Title
Bulteno - Remote File Upload
Published
2014-08-01
Title
Annonces 1.2.0.1 - Shell Upload