WordPress Plugin Vulnerabilities

WPtouch 1.9.8 - ajax/file_upload.php Crafted Content-Type File Upload Remote Code Execution

Description

The WPtouch WordPress plugin was affected by an ajax/file_upload.php Crafted Content-Type File Upload Remote Code Execution security vulnerability.

Affects Plugins

Plugin icon
wptouch
Fixed in 1.9.8.1

Classification

Type
RCE
OWASP top 10
A1: Injection
CWE
CWE-94

Miscellaneous

Verified
No
WPVDB ID
fb4acc6b-3901-4342-a80b-4d2ee0895fe4

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2015-05-15 (about 10 years ago)

Other

Published
Title
Published
2026-02-04
Title
GSheetConnector For WPForms < 4.0.2 - Subscriber+ Arbitrary Plugin Installation
Published
2017-09-23
Title
Basic Contact Form <= 1.0.3 - Potential Unauthenticated Shell Upload
Published
2024-12-05
Title
ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup < 4.0.52 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
Published
2023-08-28
Title
Import XML and RSS Feeds < 2.1.5 - Unauthenticated RCE
Published
2017-11-11
Title
WP Support Plus Responsive Ticket System < 8.0.8 - Remote Code Execution (RCE)