EUVD-2015-9397

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Vulnerability in WordPress File Upload plugin allows unauthenticated file uploads and possible code execution.

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2015-10138	29 May 201815:50	–	circl
CNNVD	WordPress plugin Work The Flow File Upload 代码问题漏洞	19 Jul 202500:00	–	cnnvd
CVE	CVE-2015-10138	19 Jul 202511:23	–	cve
Cvelist	CVE-2015-10138 Work The Flow File Upload <= 2.5.2 - Arbitrary File Upload	19 Jul 202511:23	–	cvelist
NVD	CVE-2015-10138	19 Jul 202512:15	–	nvd
Positive Technologies	PT-2025-30132	19 Jul 202500:00	–	ptsecurity
RedhatCVE	CVE-2015-10138	21 Jul 202512:03	–	redhatcve
Vulnrichment	CVE-2015-10138 Work The Flow File Upload <= 2.5.2 - Arbitrary File Upload	19 Jul 202511:23	–	vulnrichment

[
  {
    "enisaIdVendor": [
      {
        "id": "3b4eff0c-9dfe-3920-abe6-6b9b90e8b891",
        "vendor": {
          "name": "lynton_reed"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "440c5802-5a2a-3dbd-aaf7-85ff8bf74a26",
        "product": {
          "name": "Work The Flow File Upload"
        },
        "product_version": "* ≤2.5.2"
      }
    ]
  }
]

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/eb271cc8-01ec-45eb-9d6f-efc55c7c3923
homelab	www.homelab.it/index.php/2015/04/04/wordpress-work-the-flow-file-upload-vulnerability/
packetstormsecurity	www.packetstormsecurity.com/files/131294/
packetstormsecurity	www.packetstormsecurity.com/files/131512/
wpscan	www.wpscan.com/vulnerability/a49a81a9-3d4b-4c8d-b719-fc513aceecc6
plugins	www.plugins.trac.wordpress.org/changeset
plugins	www.plugins.trac.wordpress.org/changeset
acunetix	www.acunetix.com/vulnerabilities/web/wordpress-plugin-work-the-flow-file-upload-arbitrary-file-upload-2-5-2/
rapid7	www.rapid7.com/db/modules/exploit/unix/webapp/wp_worktheflow_upload/
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.19.8

EPSS0.79253

SSVC