EUVD-2012-6569

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

WordPress WP-Property plugin before 1.35.0 has an unauthenticated file upload vulnerability.

Reporter	Title	Published	Views	Family All 11
ATTACKERKB	CVE-2012-10027	5 Aug 202520:06	–	attackerkb
Circl	CVE-2012-10027	29 May 201815:50	–	circl
CNNVD	WordPress plugin WP-Property 安全漏洞	5 Aug 202500:00	–	cnnvd
CNVD	WordPress WP-Property plugin file upload vulnerability	11 Aug 202500:00	–	cnvd
CVE	CVE-2012-10027	5 Aug 202520:06	–	cve
Cvelist	CVE-2012-10027 WordPress Plugin WP-Property <= 1.35.0 PHP File Upload	5 Aug 202520:06	–	cvelist
NVD	CVE-2012-10027	5 Aug 202520:15	–	nvd
OpenVAS	WordPress WP-Property Plugin 1.35.0 'uploadify.php' Arbitrary File Upload Vulnerability - Active Check	12 Jun 201200:00	–	openvas
Positive Technologies	PT-2025-31979	5 Aug 202500:00	–	ptsecurity
RedhatCVE	CVE-2012-10027	7 Aug 202520:31	–	redhatcve

[
  {
    "enisaIdVendor": [
      {
        "id": "bdda9978-2596-3e24-9079-8df237ca3082",
        "vendor": {
          "name": "WP-Property"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "70b78095-b049-3685-993f-b451ab46aeab",
        "product": {
          "name": "WordPress Plugin"
        },
        "product_version": "* ≤1.35.0"
      }
    ]
  }
]

Source	Link
wordpress	www.wordpress.org/plugins/wp-property/
raw	www.raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/webapp/wp_property_upload_exec.rb
exploit-db	www.exploit-db.com/exploits/18987
exploit-db	www.exploit-db.com/exploits/23651
web	www.web.archive.org/web/20150103065650/http://www.opensyscom.fr:80/Actualites/wordpress-plugins-wp-property-shell-upload-vulnerability.html
vulncheck	www.vulncheck.com/advisories/wordpress-plugin-wp-property-php-file-upload
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

6.4Medium risk

Vulners AI Score6.4

CVSS 49.3

EPSS0.82423

SSVC