WordPress Plugin Vulnerabilities

PHP Speedy <= 0.5.2 - (admin_container.php) Remote Code Exec Exploit

Description

The php_speedy_wp WordPress plugin was affected by a (admin_container.php) Remote Code Exec Exploit security vulnerability.

Affects Plugins

Plugin icon
php_speedy_wp
No known fix

References

Exploitdb
16273

Classification

Type
RCE
OWASP top 10
A1: Injection
CWE
CWE-94

Miscellaneous

Verified
No
WPVDB ID
d240705f-91c8-418a-8d8a-b958f692115d

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2024-03-24
Title
WP Crontrol < 1.16.2 - Remote Code Execution
Published
2014-08-01
Title
GeoPlaces - File Upload H&ling Remote Comm& Execution
Published
2025-10-08
Title
xSmart <= 1.2.9.4 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
Published
2024-11-25
Title
InPost Gallery < 2.1.4.3 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via inpost_gallery_get_shortcode_template
Published
2025-04-15
Title
Real Estate Manager <= 7.3 - Unauthenticated Remote Code Execution