Arbitrary File Upload Vulnerability in Fusion Theme for WordPress
CVE-2015-2194

Currently unrated

Key Information:

Vendor: Wordpress
Status: Fusion
Vendor: CVE Published:; 3 March 2015

What is CVE-2015-2194?

This vulnerability exists within the Fusion theme 3.1 for WordPress, specifically in the fusion_options function found in functions.php. It permits authenticated remote users to upload files with executable extensions, leading to arbitrary code execution through the fusion_save action. Once the file is uploaded, it can be accessed via various uncontrolled vectors, posing significant security risks to sites using this theme.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch