Themes Vulnerabilities

Think Responsive 1.0 - Arbitrary shell upload

Description

The thinkresponsive WordPress theme was affected by an Arbitrary shell upload security vulnerability.

Affects Themes

thinkresponsive
No known fix

References

Exploitdb
29332
URL
https://packetstormsecurity.com/files/#123880/

Classification

Type
RCE
OWASP top 10
A1: Injection
CWE
CWE-94

Miscellaneous

Verified
No
WPVDB ID
c266f60e-0ee7-4d1a-8251-7a2d2d44d57a

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2005-06-29
Title
WordPress <= 1.5.1.2 - XML-RPC Eval Injection
Published
2026-02-26
Title
JetEngine < 3.8.1.2 - Authenticated (Contributor+) Remote Code Execution
Published
2024-11-04
Title
Tickera – WordPress Event Ticketing < 3.5.4.6 - Unauthenticated Arbitrary Shortcode Execution
Published
2025-01-30
Title
WooCommerce Product Table Lite < 3.9.5 - Unauthenticated Arbitrary Shortcode Execution & Reflected Cross-Site Scripting
Published
2024-10-09
Title
External featured image from bing <= 1.0.2 - Authenticated (Subscriber+) Remote Code Execution