CVE-2012-10027
BaseFortify
Publication date: 2025-08-05
Last updated on: 2025-08-06
Assigner: VulnCheck
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| wordpress | wordpress | * |
| andy_potanin | wp-property | 1.35.0 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-434 | The product allows the upload or transfer of dangerous file types that are automatically processed within its environment. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
The WP-Property plugin for WordPress up to version 1.35.0 has an unauthenticated file upload vulnerability in the third-party uploadify.php script. This allows a remote attacker to upload arbitrary PHP files to a temporary directory without needing to authenticate, which can lead to remote code execution on the affected server.
How can this vulnerability impact me? :
This vulnerability can allow an attacker to execute arbitrary code on your server remotely by uploading malicious PHP files. This can lead to full compromise of the affected system, including data theft, data loss, service disruption, or using the server as a foothold for further attacks.