WordPress Plugin Vulnerabilities

WP Marketplace - Arbitrary File Upload

Description

The wpmarketplace WordPress plugin was affected by an Arbitrary File Upload security vulnerability.

Affects Plugins

Plugin icon
wpmarketplace
No known fix

References

URL
http://labs.sucuri.net/?note=2016-10-17
URL
https://www.pluginvulnerabilities.com/2016/10/14/arbitrary-file-upload-vulnerability-in-wp-marketplace/

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
dfee7960-cee4-4350-9ec6-6fa88bce89ff

Timeline

Publicly Published
2016-10-14 (about 9 years ago)
Added
2016-10-18 (about 9 years ago)
Last Updated
2019-11-01 (about 6 years ago)

Other

Published
Title
Published
2014-08-01
Title
LightSpeed - Valums Uploader Shell Upload Exploit
Published
2025-11-17
Title
Gravity Forms < 2.9.22 - Unauthenticated Arbitrary File Upload via Legacy Chunked Upload
Published
2023-04-18
Title
OoohBoi Steroids for Elementor < 2.1.5 - Arbitrary File Upload
Published
2026-03-20
Title
Green Downloads < 2.09 - Authenticated (Subscriber+) Arbitrary File Upload
Published
2022-02-07
Title
Catch Themes Demo Import < 2.1.1 - Admin+ Remote Code Execution