theme

Geoplaces4 Vulnerabilities

4 known security issues reported for the Geoplaces4 WordPress theme. Most recent disclosed Aug 1, 2014.

1 critical

Running Geoplaces4 on your site? Check whether your installed version is affected.

Scan your site free

GeoPlaces 4.x [geoplaces4] < 5.0

unknown

These WordPress themes are prone to a shell upload vulnerability. It allows an attacker to execute arbitrary PHP code. Update the theme.

Affected:
up to 5.0
Fixed in:
5.0
Disclosed:
Aug 1, 2014

GeoPlaces <= 4 - Arbitrary File Upload

critical

The GeoPlaces 4 Theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via the /monetize/upload/ directory in versions up to, and including, 4. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected sites server which may make remote code...

CVSS:
9.8
Affected:
up to 4
Fixed in:
5
Disclosed:
Oct 24, 2013

GeoPlaces 4.x [geoplaces4] < 5

unknown

The GeoPlaces 4 Theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via the /monetize/upload/ directory in versions up to, and including, 4. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected sites server which may make remote code...

Affected:
up to 5
Fixed in:
5
Disclosed:
Oct 24, 2013

GeoPlaces 4.x [geoplaces4] < 100 (unfixed)

unknown
Affected:
up to 100
Fix:
No patched version reported

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database