CVE-2014-5014

Publication date

2018-04-25 17:00:00

Family

mitre

State

PUBLISHED

Description

The WordPress Flash Uploader plugin before 3.1.3 for WordPress allows remote attackers to execute arbitrary commands via vectors related to invalid characters in image_magic_path.