Beveiligingsadvies

CVE-2012-10027

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-08-05 20:06:43

Laatst bijgewerkt 2026-05-26 11:51:29

Toegewezen door VulnCheck

CVSS-score 9.3

Status PUBLISHED

Beschrijving

WP-Property plugin for WordPress up to and including version 1.35.0 contains an unauthenticated file upload vulnerability in the third-party `uploadify.php` script. A remote attacker can upload arbitrary PHP files to a temporary directory without authentication, leading to remote code execution.

← Alle CVE's bekijken Bekijk op cve.org ↗