cbcvebase.

Pippin Williamson Font Uploader vulnerabilities

1 known vulnerability affecting pippin_williamson/font_uploader.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2012-3814P2HIGHCVSS 7.5PoCv1.2.42012-06-27
CVE-2012-3814 [HIGH] CWE-264 CVE-2012-3814: Unrestricted file upload vulnerability in font-upload.php in the Font Uploader plugin 1.2.4 for Word Unrestricted file upload vulnerability in font-upload.php in the Font Uploader plugin 1.2.4 for WordPress allows remote attackers to execute arbitrary PHP code by uploading a PHP file with a .php.ttf extension, then accessing it via a direct request to the file in font-uploader/fonts.
nvd
Pippin Williamson Font Uploader vulnerabilities | cvebase