WordPress Plugin Vulnerabilities

Gravity Upload Ajax <= 1.1 - Arbitrary File Upload

Description

The gravity-file-ajax-upload-free WordPress plugin was affected by an Arbitrary File Upload security vulnerability.

Affects Plugins

Plugin icon
gravity-file-ajax-upload-free
No known fix

References

CVE
CVE-2014-4972
URL
https://g0blin.co.uk/cve-2014-4972/

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
fb5d13fd-9670-449d-b7d6-c5b157899659

Timeline

Publicly Published
2014-08-01 (about 9 years ago)
Added
2015-11-13 (about 8 years ago)
Last Updated
2020-09-22 (about 3 years ago)

Other

Published
Title
Published
2019-02-26
Title
Ultimate Membership Pro <= 7.5 - Arbitrary media upload
Published
2014-08-01
Title
dagda - Custom Background Shell Upload
Published
2014-11-30
Title
WordPress Slider Revolution Shell Upload
Published
2022-11-11
Title
PostmagThemes Demo < 1.0.8 - Admin+ Arbitrary File Upload
Published
2012-06-05
Title
Member Private Conversation < 1.4 - Unrestricted File Upload