Skip to content
OpenAdvisories

Product · WP-Property

WordPress Plugin

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2012-10027 Public exploit

    WordPress Plugin WP-Property <= 1.35.0 PHP File Upload

    WP-Property plugin for WordPress up to and including version 1.35.0 contains an unauthenticated file upload vulnerability in the third-party `uploadify.php` script. A remote attacker can upload arbitrary PHP files to a temporary directory without authenticati…