blogsafe.org My Downloads

BlogSafe.org

WordPress CVEs

Search and review WordPress-related vulnerability records.

← Back to CVE list

CVE-2015-10087

HIGH 8.8 CVSS 3.1
Published
March 7, 2023
Last modified
June 17, 2026
NVD status
Modified
Reported by
cna@vuldb.com
Weakness
CWE-434
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability has been found in UpThemes Theme DesignFolio Plus 1.2 on WordPress and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of the patch is 53f6ae62878076f99718e5feb589928e83c879a9. It is recommended to apply a patch to fix this issue. The identifier VDB-221809 was assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

Affected products and versions

  • UpThemes Theme DesignFolio Plus — Version 1.2
  • upthemes designfolio-plus — Up to and including 1.2

References

  • github.com https://github.com/CCrashBandicot/exploit/commit/53f6ae62878076f99718e5feb589928e83c879a9 Patch, Third Party Advisory
  • support.alertlogic.com https://support.alertlogic.com/hc/en-us/articles/360028203692-WordPress-Theme-DesignFolio-Plus-1-2-upload-file-php-Arbitrary-File-Upload Third Party Advisory
  • vuldb.com https://vuldb.com/?ctiid.221809 Third Party Advisory
  • vuldb.com https://vuldb.com/?id.221809 Third Party Advisory
  • www.exploit-db.com https://www.exploit-db.com/exploits/36372 Exploit, Third Party Advisory, VDB Entry
  • nvd.nist.gov Official NVD record