EUVD-2025-28512

Malicious code in bioql PyPI...

CVE-2025-53315

Cross-Site Request Forgery CSRF vulnerability in alanft Relocate Upload relocate-upload allows Stored XSS.This issue affects Relocate Upload: from n/a through = 0.24.1...

CVE-2025-53315

Cross-Site Request Forgery CSRF vulnerability in alanft Relocate Upload relocate-upload allows Stored XSS.This issue affects Relocate Upload: from n/a through = 0.24.1...

CVE-2025-53315

CVE-2025-53315 describes a CSRF vulnerability in the WordPress plugin Relocate Upload (alanft) affecting versions up to 0.24.1 that enables stored XSS. The CVE notes a CVSS v3.1 base score of 7.1 (HIGH) with network attack vector, no privileges required, but user interaction required, and changed...

CVE-2025-53315 WordPress Relocate Upload plugin <= 0.24.1 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in alanft Relocate Upload allows Stored XSS. This issue affects Relocate Upload: from n/a through 0.24.1...

CVE-2025-53315 WordPress Relocate Upload plugin <= 0.24.1 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in alanft Relocate Upload relocate-upload allows Stored XSS.This issue affects Relocate Upload: from n/a through = 0.24.1...

CVE-2025-53315: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in alanft Relocate Upload relocate-upload allows Stored XSS.This issue affects Relocate Upload: from n/a through = 0.24.1...

WordPress plugin Relocate Upload 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site request forge...

CVE-2012-1205

PHP remote file inclusion vulnerability in relocate-upload.php in Relocate Upload plugin before 0.20 for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter...

Wordpress Relocate Upload Plugin 0.14 Remote File Inclusion

在relocate-upload.php文件第16行,没有对传入的abspath进行过滤,导致任意文件本地远程文件包含 if isset$GET'rufolder' // WP setup and function access define'WPUSETHEMES', false; requireonceurldecode$GET'abspath'.'/wp-load.php'; // save us looking for it, it's passed as a GET parameterarameter...

WordPress Relocate Upload 0.14 RFI

Remote file include vulnerability in WordPress Relocate Upload plugin Vulnerability Type: Remote File Include For the exploit source code contact DSquare Security sales team...

CVE-2012-1205

PHP remote file inclusion vulnerability in relocate-upload.php in Relocate Upload plugin before 0.20 for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter...

DSquare Exploit Pack: D2SEC_WPRELOCATE

Name| d2secwprelocate ---|--- CVE| CVE-2012-1205 Exploit Pack| D2ExploitPack Description| Wordpress Relocate Upload 0.14 Local File Include Vulnerability Notes|...

Remote file inclusion

PHP remote file inclusion vulnerability in relocate-upload.php in Relocate Upload plugin before 0.20 for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter...

CVE-2012-1205

CVE-2012-1205 affects WordPress Relocate Upload plugin before 0.20. It is a PHP Remote File Inclusion via abspath in relocate-upload.php, allowing an attacker to execute arbitrary PHP code remotely. Affected component is the Relocate Upload plugin’s relocate-upload.php; root cause is improper han...

CVE-2012-1205: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in relocate-upload.php in Relocate Upload plugin before 0.20 for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter...

PT-2012-3128

Name of the Vulnerable Software and Affected Versions Relocate Upload plugin versions prior to 0.20 Description The issue allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter in the relocate-upload.php file. Recommendations For Relocate Upload plugin versions...

WordPress Plugin Relocate Upload 0.14 - Remote File Inclusion

WordPress Plugin Relocate Upload 0.14 - Remote File Inclusion Exploit Title: Relocate Upload Wordpress plugin RFI Google Dork: inurl:wp-content/plugins/relocate-upload Date: 09/19/2011 Author: Ben Schmidt supernothing AT spareclockcycles.org @supernothing Software Link:...

WordPress Relocate Upload 0.14 Remote File Inclusion

Exploit Title: Relocate Upload Wordpress plugin RFI Google Dork: inurl:wp-content/plugins/relocate-upload Date: 09/19/2011 Author: Ben Schmidt supernothing AT spareclockcycles.org @supernothing Software Link: http://wordpress.org/extend/plugins/relocate-upload/download/ Version: 0.14 tested --- P...

WordPress Relocate Upload Plugin 0.14 - Remote File Inclusion

This Relocate Upload plugin is prone to remote file include vulnerability. It allows an attacker to include a remote file and get access to the server. Solution Upgrade the plugin...