CVE-2012-5318

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

6.51%

Published

Oct 8, 2012

Modified

Apr 28, 2026

Public PoC / Exploit (2)

All weaponized →

TrickestTrickest PoC index Exploit-DBWordPress Plugin Kish Guest Posting 1.0 - Arbitrary File Upload

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Unrestricted file upload vulnerability in uploadify/scripts/uploadify.php in the Kish Guest Posting plugin 1.2 for WordPress allows remote attackers to execute arbitrary code by uploading a file with a double extension, then accessing it via a direct request to the file in the directory specified by the folder parameter. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-1125.

Affected Products (2)

kishore_asokan · kish_guest_posting_pluginvulnerable

wordpress · wordpress

References (4)

http://secunia.com/advisories/47688

Vendor Advisory

http://www.openwall.com/lists/oss-security/2012/03/08/1

http://secunia.com/advisories/47688

Vendor Advisory

http://www.openwall.com/lists/oss-security/2012/03/08/1

KEV Catalog EPSS Scores Vendors All CVEs