CVE-2012-3577

🗓️ 17 Jun 2012 01:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 67 Views🌐 WEB

Unrestricted file upload vulnerability in doupload.php in Nmedia Member Conversation plugin before 1.4 for WordPress

Reporter	Title	Published	Views	Family All 7
Circl	CVE-2012-3577	5 Jun 201500:00	–	circl
Cvelist	CVE-2012-3577	17 Jun 201201:00	–	cvelist
NVD	CVE-2012-3577	17 Jun 201203:41	–	nvd
OpenVAS	WordPress Nmedia Member Conversation Plugin Arbitrary File Upload Vulnerability	20 Jun 201200:00	–	openvas
Patchstack	WordPress N-Media Member Conversation Plugin - Arbitrary File Upload	5 Jun 201500:00	–	patchstack
Prion	Unrestricted file upload	17 Jun 201203:41	–	prion
WPVulnDB	Member Private Conversation < 1.4 - Unrestricted File Upload	5 Jun 201200:00	–	wpvulndb

NVD

Node

AND

Source	Link
securityfocus	www.securityfocus.com/bid/53790
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/76076
packetstormsecurity	www.packetstormsecurity.org/files/113287/WordPress-Nmedia-WP-Member-Conversation-1.35.0-Shell-Upload.html
secunia	www.secunia.com/advisories/49375
opensyscom	www.opensyscom.fr/Actualites/wordpress-plugins-nmedia-wordpress-member-conversation-shell-upload-vulnerability.html
wordpress	www.wordpress.org/extend/plugins/wordpress-member-private-conversation/changelog/

Parameter	Position	Path	Description	CWE
file	request body	doupload.php	Unrestricted file upload leading to arbitrary code execution via uploaded executable files	CWE-264
extension	request body	doupload.php	Unrestricted file upload leading to arbitrary code execution via uploaded executable files	CWE-264

29 Apr 2026 01:13Current

8High risk

Vulners AI Score8

CVSS 27.5

EPSS0.213