Themes Vulnerabilities

Money - wp-content/themes/MoneyTheme/uploads/upload.php File Upload Remote Code Execution

Description

The moneytheme WordPress theme was affected by a wp-content/themes/MoneyTheme/uploads/upload.php File Upload Remote Code Execution security vulnerability.

Affects Themes

moneytheme
No known fix

References

URL
https://packetstormsecurity.com/files/#123819/

Classification

Type
RCE
OWASP top 10
A1: Injection
CWE
CWE-94

Miscellaneous

Verified
No
WPVDB ID
da2fac97-c438-4b15-9d08-9925083db5b2

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2015-04-21
Title
MailChimp Subscribe Form <= 1.1 - Email Field Remote PHP Code Execution
Published
2022-02-08
Title
PHP Everywhere < 3.0.0 - Subscriber+ RCE via Shortcode
Published
2025-02-05
Title
CURCY – Multi Currency for WooCommerce < 2.2.6 - Unauthenticated Arbitrary Shortcode Execution via get_products_price Function
Published
2020-08-03
Title
Elegant Themes (Divi 3.0 - 4.5.2, Extra 2.0 - 4.5.2, Divi Builder 2.0 - 4.5.2) - Authenticated Arbitrary File Upload
Published
2025-08-23
Title
Global DNS < 3.1.1 - Unauthenticated Remote Code Execution