Unrestricted file upload vulnerability in php/upload.php in the wpStoreCart plugin before 2.5.30 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in uploads/wpstorecart.
Metrics
Affected Vendors & Products
References
History
No history.

Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-06T20:13:51.005Z
Reserved: 2012-06-15T00:00:00
Link: CVE-2012-3576

No data.

Status : Deferred
Published: 2012-06-16T00:55:07.873
Modified: 2025-04-11T00:51:21.963
Link: CVE-2012-3576

No data.