CVE-2012-3577

The CVE-2012-3577 issue affects the WordPress N‑Media Member Conversation plugin prior to version 1.4. It is an unrestricted file upload in doupload.php that lets remote attackers upload a file with an executable extension and access it at wp-content/uploads/user_uploads, enabling arbitrary code ...