ThreatPress

WordPress Vulnerabilities Database

Back

WordPress WP Property Plugin - PHP File Upload

Product
WP Property
Description
WordPress WP Property plugin is prone to a PHP file upload vulnerability. It allows an attacker to upload arbitrary PHP code and run it in the context of the Web server process. This may facilitate unauthorized access or privilege escalation.
Solution
Update the plugin.
Classification
Type Arbitrary File Upload
References
Exploit-DB
CVE
Name CVE-N/A
Versions
Affected In <= 1.0
Fixed In 1.1
Disclosure date
2012-12-25
Credits
metasploit