cbcvebase.

Wp-Property Wordpress Plugin vulnerabilities

1 known vulnerability affecting wp-property/wordpress_plugin.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2012-10027P2CRITICALCVSS 9.3PoC≤ 1.35.02025-08-05
CVE-2012-10027 [CRITICAL] CWE-434 CVE-2012-10027: WP-Property plugin for WordPress up to and including version 1.35.0 contains an unauthenticated file WP-Property plugin for WordPress up to and including version 1.35.0 contains an unauthenticated file upload vulnerability in the third-party `uploadify.php` script. A remote attacker can upload arbitrary PHP files to a temporary directory without authentication, leading to remote code execution.
nvd
Wp-Property Wordpress Plugin vulnerabilities | cvebase