Unrestricted File Upload Vulnerability in AllWebMenus Plugin for WordPress

CVE-2012-1010

Summary

The AllWebMenus plugin for WordPress prior to version 1.1.9 contains an unrestricted file upload vulnerability. This allows attackers to upload a ZIP file that contains arbitrary PHP code. Once uploaded, they can execute this code by directly accessing it through an unspecified directory. This type of vulnerability poses a significant security threat, enabling malicious users to compromise the server and potentially gain further access to sensitive information.

References