CVE-2023-25489

CVE-2023-25489 is a CSRF vulnerability in the WordPress plugin Update Theme and Plugins from Zip File (versions

Wordpress plugin Organizer File file upload vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A file upload vulnerability exists in the Wordpress plugin Organizer File, which can be exploited by attackers to upload...

WordPress Plugin Work The Flow File Arbitrary File Upload Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on PHP and MySQL servers.Work The Flow File is a file upload plugin for Wordpress. A file upload vulnerability exists in the WordPress plugi...

CVE-2008-2510

CVE-2008-2510 is a SQL injection vulnerability in the WordPress Upload File plugin, specifically in wp-uploadfile.php, where the f_id parameter enables remote attackers to execute arbitrary SQL commands. The issue is documented across multiple sources (NVD/NVD list and patch coverage) as affectin...