Unrestricted File Upload Vulnerability in wpStoreCart Plugin for WordPress
CVE-2012-3576
Currently unrated
Key Information:
- Vendor
Wordpress
- Status
- Vendor
- CVE Published:
- 16 June 2012
Badges
👾 Exploit Exists🟡 Public PoC🟣 EPSS 18%
What is CVE-2012-3576?
The wpStoreCart plugin for WordPress has a vulnerability that allows attackers to upload files with executable extensions via php/upload.php. This can lead to arbitrary code execution, as the uploaded files can be accessed directly via a request. If the plugin is not updated to version 2.5.30 or later, WordPress sites remain at risk of exploitation through this security flaw.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.