WordPress Plugin Vulnerabilities

AllWebMenus Shell Upload < 1.1.9 - Shell Upload

Description

The AllWebMenus WordPress Menu Plugin WordPress plugin was affected by a Shell Upload security vulnerability.

Affects Plugins

Plugin icon
allwebmenus-wordpress-menu-plugin
Fixed in 1.1.9

References

CVE
CVE-2012-1010
CVE
CVE-2012-1011
Exploitdb
18407
URL
https://packetstormsecurity.com/files/#108946/

Miscellaneous

Verified
No
WPVDB ID
b525557c-4dee-4d81-8371-ee4924dc5c1d

Timeline

Publicly Published
2012-01-23 (about 14 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-11-28 (about 6 years ago)

Other

Published
Title
Published
2018-10-15
Title
Tajer - Unauthenticated Arbitrary File Upload
Published
2022-08-01
Title
Advanced Custom Fields 5.0-5.12.2 - Unauthenticated File Upload
Published
2025-04-25
Title
Aeropage Sync for Airtable < 3.3.0 - Authenticated (Subscriber+) Arbitrary File Upload
Published
2014-08-01
Title
Sitemile Auctions 2.0.1.3 - wp-content/plugins/auctionPlugin/upload.php File Upload PHP Code Execution
Published
2025-09-17
Title
Medcity < 1.1.9 - Unauthenticated Arbitrary File Upload