Skip to content
OpenAdvisories

Archive

22 July 2025

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2012-10020 Public exploit

    FoxyPress <= 0.4.2.1 - Arbitrary File Upload

    The FoxyPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the uploadify.php file in versions up to, and including, 0.4.2.1. This makes it possible for unauthenticated attackers to upload arbitrary files …

  • Critical 9.8
    CVE-2015-10137 Public exploit

    Website Contact Form With File Upload <= 1.3.4 - Arbitrary File Upload

    The Website Contact Form With File Upload plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'upload_file()' function in versions up to, and including, 1.3.4. This makes it possible for unauthenticated atta…