Arbitrary File Upload Vulnerability in FoxyPress Plugin for WordPress

CVE-2012-10020

What is CVE-2012-10020?

The FoxyPress plugin for WordPress is susceptible to arbitrary file uploads due to inadequate file type validation in the uploadify.php file, affecting versions up to and including 0.4.2.1. This vulnerability allows unauthenticated adversaries to upload arbitrary files to the server, which can lead to potential remote code execution, compromising the integrity and security of the affected website.

References