Themes Vulnerabilities

ThisWay - remote shell upload

Description

The thisway WordPress theme was affected by a remote shell upload security vulnerability.

Affects Themes

thisway
No known fix

References

URL
https://packetstormsecurity.com/files/#123895/

Classification

Type
RCE
OWASP top 10
A1: Injection
CWE
CWE-94

Miscellaneous

Verified
No
WPVDB ID
b1517d24-381c-4704-88da-c9c0adae531a

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2025-07-31
Title
Product XML Feed Manager for WooCommerce < 2.9.4 - Authenticated (Contributor+) Remote Code Execution
Published
2021-09-13
Title
EditorsKit < 1.31.6 - Contributor+ Arbitrary PHP Code Execution
Published
2023-11-29
Title
rtMedia for WordPress, BuddyPress and bbPress < 4.6.16 - Admin+ RCE
Published
2014-08-01
Title
WPLocalPlaces - File Upload Remote Code Execution
Published
2015-10-23
Title
Form Manager <= 1.7.2 - Authenticated Remote Command Execution (RCE)