Font Uploader

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2012-3814 HIGH POC THREAT Act Now

Unrestricted file upload vulnerability in font-upload.php in the Font Uploader plugin 1.2.4 for WordPress allows remote attackers to execute arbitrary PHP code by uploading a PHP file with a .php.ttf. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 10.7%.

WordPress Privilege Escalation PHP File Upload Font Uploader

NVD Exploit-DB

CVSS 2.0

7.5

EPSS

10.7%

CVE-2012-3814

EPSS 11% CVSS 7.5

HIGH POC THREAT Act Now

Unrestricted file upload vulnerability in font-upload.php in the Font Uploader plugin 1.2.4 for WordPress allows remote attackers to execute arbitrary PHP code by uploading a PHP file with a .php.ttf. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 10.7%.

WordPress Privilege Escalation PHP +2

NVD Exploit-DB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy