Skip to main content

Theme Tuner Plugin

1 CVEs product

Monthly

CVE-2012-0934 HIGH POC PATCH This Week

PHP remote file inclusion vulnerability in ajax/savetag.php in the Theme Tuner plugin for WordPress before 0.8 allows remote attackers to execute arbitrary PHP code via a URL in the tt-abspath. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

WordPress Code Injection PHP RCE Theme Tuner Plugin
NVD
CVSS 2.0
7.5
EPSS
1.5%
EPSS 2% CVSS 7.5
HIGH POC PATCH This Week

PHP remote file inclusion vulnerability in ajax/savetag.php in the Theme Tuner plugin for WordPress before 0.8 allows remote attackers to execute arbitrary PHP code via a URL in the tt-abspath. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

WordPress Code Injection PHP +2
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy