CVE-2012-10027 WordPress Plugin WP-Property <= 1.35.0 PHP File Upload

🗓️ 05 Aug 2025 20:06:43Reported by VulnCheckType

WordPress WP-Property plugin 1.35.0 has unauthenticated file upload vulnerability enabling remote code execution

Reporter	Title	Published	Views	Family All 11
ATTACKERKB	CVE-2012-10027	5 Aug 202520:06	–	attackerkb
Circl	CVE-2012-10027	29 May 201815:50	–	circl
CNNVD	WordPress plugin WP-Property 安全漏洞	5 Aug 202500:00	–	cnnvd
CNVD	WordPress WP-Property plugin file upload vulnerability	11 Aug 202500:00	–	cnvd
CVE	CVE-2012-10027	5 Aug 202520:06	–	cve
EUVD	EUVD-2012-6569	7 Oct 202500:30	–	euvd
NVD	CVE-2012-10027	5 Aug 202520:15	–	nvd
OpenVAS	WordPress WP-Property Plugin 1.35.0 'uploadify.php' Arbitrary File Upload Vulnerability - Active Check	12 Jun 201200:00	–	openvas
Positive Technologies	PT-2025-31979	5 Aug 202500:00	–	ptsecurity
RedhatCVE	CVE-2012-10027	7 Aug 202520:31	–	redhatcve

[
  {
    "defaultStatus": "unaffected",
    "modules": [
      "uploadify.php"
    ],
    "product": "WordPress Plugin",
    "vendor": "WP-Property",
    "versions": [
      {
        "lessThanOrEqual": "1.35.0",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
web	www.web.archive.org/web/20150103065650/http://www.opensyscom.fr:80/Actualites/wordpress-plugins-wp-property-shell-upload-vulnerability.html
wordpress	www.wordpress.org/plugins/wp-property/
raw	www.raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/webapp/wp_property_upload_exec.rb
exploit-db	www.exploit-db.com/exploits/18987
exploit-db	www.exploit-db.com/exploits/23651
vulncheck	www.vulncheck.com/advisories/wordpress-plugin-wp-property-php-file-upload

26 May 2026 11:51Current

CVSS 49.3

EPSS0.82423

CWE-434