WordPress Plugin Vulnerabilities

seo-spy-google - ofc_upload_image.php Arbitrary File Upload

Description

The seo-spy-google-wordpress-plugin WordPress plugin was affected by an ofc_upload_image.php Arbitrary File Upload security vulnerability.

Affects Plugins

Plugin icon
seo-spy-google-wordpress-plugin
No known fix

References

CVE
CVE-2009-4140
Exploitdb
24492
URL
exploit/unix/webapp/open_flash_chart_upload_exec

Miscellaneous

Verified
No
WPVDB ID
c5a6aefd-f4b2-40bc-ac67-1139452bd112

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-11-01 (about 6 years ago)

Other

Published
Title
Published
2026-03-18
Title
Widget Wrangler <= 2.3.9 - Authenticated (Author+) Remote Code Execution
Published
2020-10-09
Title
Autoptimize < 2.7.8 - Arbitrary File Upload via "Import Settings"
Published
2026-04-20
Title
Ecommerce Zone < 0.9.8 - Subscriber+ Arbitrary File Upload
Published
2015-03-04
Title
DesignFolio Plus Theme <= 1.2 - Arbitrary File Upload
Published
2025-06-12
Title
WP VR < 8.5.27 - Authenticated (Contributor+) Arbitrary File Upload