Designfolio Plus Vulnerabilities

[en] ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability has been found in UpThemes Theme DesignFolio Plus 1.2 on WordPress and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to unrestricted upload. The attack can be launched remotely. The exploit has been disc...

Affected:

up to 1.2

Fix:

No patched version reported

Disclosed:

Mar 7, 2023

CVE-2015-10087 on NVD →

The DesignFolio Plus Theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'upload-file.php' file. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.

CVSS:

9.8

Affected:

up to *

Fix:

No patched version reported

Disclosed:

Mar 4, 2015

CVE-2015-10087 on NVD →

WordPress DesignFolio Plus theme is prone to an arbitrary file upload vulnerability. It allows an attacker to upload arbitrary files to the affected computer. Update the theme.

Affected:

up to 1.3

Fixed in:

1.3

Disclosed:

Mar 4, 2015

The DesignFolio Plus Theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'upload-file.php' file. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.

Affected:

up to 1.2

Fix:

No patched version reported

Disclosed:

Mar 4, 2015

Vulnerable File : upload-file.php

Affected:

up to 1.2

Fix:

No patched version reported