Security Advisory

CVE-2012-10027

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-08-05 20:06:43

Last updated 2026-05-26 11:51:29

Assigner VulnCheck

CVSS score 9.3

State PUBLISHED

Description

WP-Property plugin for WordPress up to and including version 1.35.0 contains an unauthenticated file upload vulnerability in the third-party `uploadify.php` script. A remote attacker can upload arbitrary PHP files to a temporary directory without authentication, leading to remote code execution.

← Browse all CVEs View on cve.org ↗