CVE-2015-1172

HIGH 7.5 CVSS 2.0

Published: February 11, 2015
Last modified: June 17, 2026
NVD status: Modified
Reported by: cve@mitre.org
CVSS vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Unrestricted file upload vulnerability in admin/upload-file.php in the Holding Pattern theme (aka holding_pattern) 0.6 and earlier for WordPress allows remote attackers to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via a direct request to the file in an unspecified directory.

Affected products and versions

n/a n/a — Versions not specified
holding_pattern_project holding_pattern — Up to and including 0.6

References

packetstormsecurity.com http://packetstormsecurity.com/files/130282/WordPress-Holding-Pattern-0.6-Shell-Upload.html
www.securityfocus.com http://www.securityfocus.com/bid/72546
wpvulndb.com https://wpvulndb.com/vulnerabilities/7784
nvd.nist.gov Official NVD record

WordPress CVEs

Description

Affected products and versions

References