WordPress Plugin Vulnerabilities

GoUrl Bitcoin Payment Gateway < 1.4.14 - Shell Upload

Description

The GoUrl Bitcoin Payment Gateway & Paid Downloads & Membership WordPress plugin was affected by a Shell Upload security vulnerability.

Affects Plugins

Plugin icon
gourl-bitcoin-payment-gateway-paid-downloads-membership
Fixed in 1.4.14

References

CVE
CVE-2019-1010209
URL
https://gist.github.com/pouyadarabi/467d3167551fb0712d3264c72db092af

Miscellaneous

Verified
No
WPVDB ID
b0dfb4c8-87fb-43a8-8a9e-80e36477f3f8

Timeline

Publicly Published
2018-10-31 (about 7 years ago)
Added
2019-08-21 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2024-03-07
Title
Elite Booster for WooCommerce < 7.1.8 - Authenticated (Subscriber+) Arbitrary File Upload
Published
2026-03-12
Title
Pix for WooCommerce < 1.6.0 - Unauthenticated Arbitrary File Upload
Published
2025-07-11
Title
Helpdesk Support Ticket System for WooCommerce <= 2.1.0 - Unauthenticated Arbitrary File Upload
Published
2024-12-13
Title
Crafthemes Demo Import <= 3.3 - Authenticated (Admin+) Arbitrary File Upload in process_uploaded_files
Published
2014-08-01
Title
Oxygen - Remote File Upload