CVE-2012-3576

Published Jun 16, 2012 CVSS 2.0 · 10.0 Critical EPSS 18.2% KEV · Not listed
Description
Unrestricted file upload vulnerability in php/upload.php in the wpStoreCart plugin before 2.5.30 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in uploads/wpstorecart.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 6, 2024, 8:13 PM
Reserved
Jun 15, 2012, 12:00 AM
Status
Modified
Published
Jun 16, 2012, 12:55 AM
Modified
Jun 16, 2026, 11:43 PM