WordPress Plugin Vulnerabilities

Wp2android 1.1.4 - Unauthenticated File Upload

Description

Plugin is still affected and has been closed.

Affects Plugins

Plugin icon
wp2android-turn-wp-site-into-android-app
No known fix

References

CVE
CVE-2017-1002003
Exploitdb
41540
URL
https://seclists.org/oss-sec/2017/q1/560
URL
http://www.vapidlabs.com/advisory.php?v=182

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
c7d71749-9bb5-4f04-a165-b2c18ccf90b1

Timeline

Publicly Published
2017-03-07 (about 9 years ago)
Added
2017-03-08 (about 9 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2026-03-23
Title
Ona < 1.24 - Authenticated (Subscriber+) Arbitrary File Upload
Published
2022-04-21
Title
VikBooking Hotel Booking Engine & PMS < 1.5.8 - Admin+ PHP File Upload
Published
2024-08-16
Title
Metform Elementor Contact Form Builder < 3.3.0 - Unauthenticated Double-Extension Arbitrary File Upload
Published
2025-09-22
Title
Product Options and Price Calculation Formulas for WooCommerce – Uni CPO (Premium) < 4.9.56 - Unauthenticated Arbitrary File Upload via 'uni_cpo_upload_file'
Published
2023-11-10
Title
Welcart e-Commerce < 2.9.5 - Subscriber+ Arbitrary File Upload