CWE-434Vulnerability type

WordPress Arbitrary File Upload vulnerabilities (page 1349)

Upload handlers that accept PHP files, the shortest route from a plugin bug to a webshell.

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Arbitrary File Upload vulnerabilities (page 1349)
Severity	Vulnerability	CVE	Installs	Published
Critical9.8	Unrestricted File Upload gravity-file-ajax-upload-free≤1.1No patch available	CVE-2014-4972	—	Aug 1, 2014
Critical9.8	Remote File Inclusion WP-Table≤1.43Update to 1.44	CVE-2007-2484	—	Aug 1, 2014
Medium4.7	Cross-Site Request Forgery Simple Shopping Cart<3.6Update to 3.6	CVE-2013-2705	—	Aug 1, 2014
Medium6.1	Multiple Cross-Site Scripting Events Manager – Calendar, Bookings, Tickets, Appointments and more!≤5.5.1Update to 5.5.2	CVE-2013-7477	—	Aug 1, 2014
High7.5	Local File Inclusion WP AmASIN – The Amazon Affiliate Shop≤0.9.6Update to 0.9.7	CVE-2014-4577	—	Aug 1, 2014
Critical9.8	Remote Code Execution W3 Total Cache≤0.9.2.8Update to 0.9.2.9	CVE-2013-2010	—	Aug 1, 2014
Medium6.1	Cross-Site Scripting Crowdsignal Dashboard – Polls, Surveys & more≤2.0.24Update to 2.0.25	CVE-2014-4856	—	Aug 1, 2014
Medium6.1	Cross-Site Scripting BulletProof Security≤.48.9Update to .49	CVE-2013-3487	—	Aug 1, 2014
High8.8	Remote Code Execution WP Super Cache≤1.2Update to 1.3	CVE-2013-2009	—	Aug 1, 2014
High8.1	Unauthenticated Local File Inclusion Tinymce Thumbnail Gallery≤1.0.0Update to 1.1.0	CVE-2012-20002	—	Aug 1, 2014
Medium6.1	Reflected Cross Site Scripting WHOIS≤1.4.2.2Update to 1.4.2.3	CVE-2011-5194	—	Aug 1, 2014
High7.2	Stored Cross-Site Scripting PrettyLinks – Affiliate Link Management, URL Shortener, Link Cloaking, Tracking & Branded Short Links<1.6.3Update to 1.6.3	CVE-2013-1636	—	Aug 1, 2014
Medium6.5	Cross-Site Request Forgery wp-html-sitemap≤1.2No patch available	CVE-2014-2675	—	Aug 1, 2014
High7.3	Authentication Bypass Portable phpMyAdmin≤1.3.0Update to 1.3.1	CVE-2012-5469	—	Aug 1, 2014
Medium6.3	Cross-Site Request Forgery WordPress Content Slide≤1.4.2No patch available	CVE-2013-2708	—	Aug 1, 2014
High8.8	Cross-Site Request Forgery Xhanch – My Twitter≤2.7.6Update to 2.7.7	CVE-2013-3253	—	Aug 1, 2014
High7.1	Cross-Site Scripting Polylang<1.5.2Update to 1.5.2	CVE-2014-4855	—	Aug 1, 2014
Medium6.1	Cross-Site Scripting via Search Parameter All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights)≤2.0.3Update to 2.0.3.1	CVE-2013-5988	—	Aug 1, 2014
Medium6.1	Open Redirection WP Symposium≤13.04Update to 13.05	CVE-2013-2694	—	Aug 1, 2014
Medium6.1	Cross-Site Scripting Count per Day≤3.1.1Update to 3.2	CVE-2012-3434	—	Aug 1, 2014
Critical9.8	Unauthenticated Command Injection EZPZ One Click Backup≤12.03.10No patch available	CVE-2014-3114	—	Aug 1, 2014
High8.8	SQL Injection Mingle Forum<1.0.33Update to 1.0.33	CVE-2012-5328	—	Aug 1, 2014
Medium5.3	Cross-Site Scripting Redirection<2.2.10Update to 2.2.10	CVE-2011-4562	—	Aug 1, 2014
Medium4.3	Cross-Site Request Forgery Calendar≤1.3.2Update to 1.3.3	CVE-2013-2698	—	Aug 1, 2014
High7.2	Cross-Site Scripting Wordfence Security – Firewall, Malware Scan, and Login Security≤5.1.3Update to 5.1.4	CVE-2014-4664	—	Jul 30, 2014
Medium6.1	Reflected Cross-Site Scripting WhyDoWork AdSense≤1.2No patch available	CVE-2014-9100	—	Jul 29, 2014
High8.8	Cross-Site Request Forgery WhyDoWork AdSense≤1.2No patch available	CVE-2014-9099	—	Jul 29, 2014
Critical9.8	SQL Injection fbgorillaall versionsNo patch available	CVE-2014-5200	—	Jul 28, 2014
Critical9.8	SQL Injection Lead-Octopus-Power<1.1.1Update to 1.1.1	CVE-2014-5189	—	Jul 28, 2014
Medium5.4	Cross-Site Scripting WORDPRESS VIDEO GALLERY≤2.5Update to 2.6	CVE-2014-9098	—	Jul 24, 2014

Critical9.8
Unrestricted File Upload
gravity-file-ajax-upload-free
≤1.1No patch available
CVE-2014-4972Aug 1, 2014
Critical9.8
Remote File Inclusion
WP-Table
≤1.43Update to 1.44
CVE-2007-2484Aug 1, 2014
Medium4.7
Cross-Site Request Forgery
Simple Shopping Cart
<3.6Update to 3.6
CVE-2013-2705Aug 1, 2014
Medium6.1
Multiple Cross-Site Scripting
Events Manager – Calendar, Bookings, Tickets, Appointments and more!
≤5.5.1Update to 5.5.2
CVE-2013-7477Aug 1, 2014
High7.5
Local File Inclusion
WP AmASIN – The Amazon Affiliate Shop
≤0.9.6Update to 0.9.7
CVE-2014-4577Aug 1, 2014
Critical9.8
Remote Code Execution
W3 Total Cache
≤0.9.2.8Update to 0.9.2.9
CVE-2013-2010Aug 1, 2014
Medium6.1
Cross-Site Scripting
Crowdsignal Dashboard – Polls, Surveys & more
≤2.0.24Update to 2.0.25
CVE-2014-4856Aug 1, 2014
Medium6.1
Cross-Site Scripting
BulletProof Security
≤.48.9Update to .49
CVE-2013-3487Aug 1, 2014
High8.8
Remote Code Execution
WP Super Cache
≤1.2Update to 1.3
CVE-2013-2009Aug 1, 2014
High8.1
Unauthenticated Local File Inclusion
Tinymce Thumbnail Gallery
≤1.0.0Update to 1.1.0
CVE-2012-20002Aug 1, 2014
Medium6.1
Reflected Cross Site Scripting
WHOIS
≤1.4.2.2Update to 1.4.2.3
CVE-2011-5194Aug 1, 2014
High7.2
Stored Cross-Site Scripting
PrettyLinks – Affiliate Link Management, URL Shortener, Link Cloaking, Tracking & Branded Short Links
<1.6.3Update to 1.6.3
CVE-2013-1636Aug 1, 2014
Medium6.5
Cross-Site Request Forgery
wp-html-sitemap
≤1.2No patch available
CVE-2014-2675Aug 1, 2014
High7.3
Authentication Bypass
Portable phpMyAdmin
≤1.3.0Update to 1.3.1
CVE-2012-5469Aug 1, 2014
Medium6.3
Cross-Site Request Forgery
WordPress Content Slide
≤1.4.2No patch available
CVE-2013-2708Aug 1, 2014
High8.8
Cross-Site Request Forgery
Xhanch – My Twitter
≤2.7.6Update to 2.7.7
CVE-2013-3253Aug 1, 2014
High7.1
Cross-Site Scripting
Polylang
<1.5.2Update to 1.5.2
CVE-2014-4855Aug 1, 2014
Medium6.1
Cross-Site Scripting via Search Parameter
All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights)
≤2.0.3Update to 2.0.3.1
CVE-2013-5988Aug 1, 2014
Medium6.1
Open Redirection
WP Symposium
≤13.04Update to 13.05
CVE-2013-2694Aug 1, 2014
Medium6.1
Cross-Site Scripting
Count per Day
≤3.1.1Update to 3.2
CVE-2012-3434Aug 1, 2014
Critical9.8
Unauthenticated Command Injection
EZPZ One Click Backup
≤12.03.10No patch available
CVE-2014-3114Aug 1, 2014
High8.8
SQL Injection
Mingle Forum
<1.0.33Update to 1.0.33
CVE-2012-5328Aug 1, 2014
Medium5.3
Cross-Site Scripting
Redirection
<2.2.10Update to 2.2.10
CVE-2011-4562Aug 1, 2014
Medium4.3
Cross-Site Request Forgery
Calendar
≤1.3.2Update to 1.3.3
CVE-2013-2698Aug 1, 2014
High7.2
Cross-Site Scripting
Wordfence Security – Firewall, Malware Scan, and Login Security
≤5.1.3Update to 5.1.4
CVE-2014-4664Jul 30, 2014
Medium6.1
Reflected Cross-Site Scripting
WhyDoWork AdSense
≤1.2No patch available
CVE-2014-9100Jul 29, 2014
High8.8
Cross-Site Request Forgery
WhyDoWork AdSense
≤1.2No patch available
CVE-2014-9099Jul 29, 2014
Critical9.8
SQL Injection
fbgorilla
all versionsNo patch available
CVE-2014-5200Jul 28, 2014
Critical9.8
SQL Injection
Lead-Octopus-Power
<1.1.1Update to 1.1.1
CVE-2014-5189Jul 28, 2014
Medium5.4
Cross-Site Scripting
WORDPRESS VIDEO GALLERY
≤2.5Update to 2.6
CVE-2014-9098Jul 24, 2014