CVE-2012-10026 WordPress Plugin Asset-Manager <= 2.0 PHP File Upload

🗓️ 05 Aug 2025 20:06:23Reported by VulnCheckType

WordPress Plugin Asset-Manager <= 2.0 has an unauthenticated file upload vulnerability leading to remote code execution.

Reporter	Title	Published	Views	Family All 10
ATTACKERKB	CVE-2012-10026	5 Aug 202520:06	–	attackerkb
Circl	CVE-2012-10026	29 May 201815:50	–	circl
CNNVD	WordPress plugin Asset-Manager 安全漏洞	5 Aug 202500:00	–	cnnvd
CVE	CVE-2012-10026	5 Aug 202520:06	–	cve
EUVD	EUVD-2012-6570	7 Oct 202500:30	–	euvd
NVD	CVE-2012-10026	5 Aug 202520:15	–	nvd
OpenVAS	WordPress Asset Manager Plugin 0.2 'upload.php' Arbitrary File Upload Vulnerability - Active Check	8 Jun 201200:00	–	openvas
Positive Technologies	PT-2025-31978 · WordPress · Asset-Manager	5 Aug 202500:00	–	ptsecurity
RedhatCVE	CVE-2012-10026	7 Aug 202520:31	–	redhatcve
Vulnrichment	CVE-2012-10026 WordPress Plugin Asset-Manager <= 2.0 PHP File Upload	5 Aug 202520:06	–	vulnrichment

[
  {
    "vendor": "jkriddle",
    "product": "asset-manager",
    "modules": [
      "upload.php"
    ],
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThanOrEqual": "2.0",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
vulncheck	www.vulncheck.com/advisories/wordpress-plugin-asset-manager-php-file-upload
wordpress	www.wordpress.org/plugins/asset-manager/
exploit-db	www.exploit-db.com/exploits/18993
exploit-db	www.exploit-db.com/exploits/23652
raw	www.raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/webapp/wp_asset_manager_upload_exec.rb
web	www.web.archive.org/web/20150106144832/http://www.opensyscom.fr:80/Actualites/wordpress-plugins-asset-manager-shell-upload-vulnerability.html

28 May 2026 14:48Current

CVSS 410

EPSS0.81659

CWE-434