CVEvulnerability

CVE-2012-1010

7.5 HIGH Published 2012-02-07 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-02-07
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-20

Description

Unrestricted file upload vulnerability in actions.php in the AllWebMenus plugin before 1.1.8 for WordPress allows remote attackers to execute arbitrary PHP code by uploading a ZIP file containing a PHP file, then accessing it via a direct request to the file in an unspecified directory.

Affected configurations

• likno allwebmenus plugin (<= 1.1.7) • likno allwebmenus plugin 1.0.1 • likno allwebmenus plugin 1.0.3 • likno allwebmenus plugin 1.0.4 • likno allwebmenus plugin 1.0.9 • likno allwebmenus plugin 1.0.10 • likno allwebmenus plugin 1.0.11 • likno allwebmenus plugin 1.0.12 • likno allwebmenus plugin 1.0.17 • likno allwebmenus plugin 1.0.18 • likno allwebmenus plugin 1.0.19 • likno allwebmenus plugin 1.0.20 • likno allwebmenus plugin 1.0.21 • likno allwebmenus plugin 1.0.22 • likno allwebmenus plugin 1.0.23 • likno allwebmenus plugin 1.0.24 • likno allwebmenus plugin 1.1.1 • likno allwebmenus plugin 1.1.2 • likno allwebmenus plugin 1.1.3 • likno allwebmenus plugin 1.1.4 • likno allwebmenus plugin 1.1.5 • likno allwebmenus plugin 1.1.6

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References