WordPress Plugin Vulnerabilities

Work-The-Flow 1.2.1 - Shell Upload

Description

The work-the-flow-file-upload WordPress plugin was affected by a Shell Upload security vulnerability.

Affects Plugins

Plugin icon
work-the-flow-file-upload
Fixed in 2.3.2

References

URL
https://packetstormsecurity.com/files/#126333/

Classification

Type
RCE
OWASP top 10
A1: Injection
CWE
CWE-94

Miscellaneous

Submitter
pvdl
Verified
No
WPVDB ID
c23b2f3d-86f3-4248-8fb7-fdecd40c3953

Timeline

Publicly Published
2014-10-12 (about 11 years ago)
Added
2014-10-12 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2025-05-05
Title
LayoutBoxx <= 0.3.1 - Unauthenticated Arbitrary Shortcode Execution
Published
2025-02-21
Title
Show Me The Cookies <= 1.0 - Unauthenticated Arbitrary Shortcode Execution
Published
2024-09-09
Title
Affiliate Super Assistent < 1.5.4 - Unauthenticated Arbitrary Shortcode Execution
Published
2024-11-18
Title
WPB Popup for Contact Form 7 – Showing The Contact Form 7 Popup on Button Click – CF7 Popup < 1.7.6 - Unauthenticated Arbitrary Shortcode Execution via wpb_pcf_fire_contact_form
Published
2024-07-29
Title
GEO my WordPress < 4.5.0.2 - Unauthenticated LFI to RCE/PHAR Deserialization