CVE-2012-1011

The CVE-2012-1011 entry involves actions.php in the AllWebMenus WordPress plugin (version 1.1.8). The vulnerability allows remote attackers to bypass access restrictions to upload and execute arbitrary PHP code by setting HTTP_REFERER to a specific value, uploading a ZIP containing a PHP file, an...