WordPress Work The Flow File Upload <= 2.5.2 Shell Upload Vulnerability

wpscan.com 2025-07-20查看中文 →

Security AdvisoryCriticalWordPress (Work The Flow File Upload)

Affected:

Work The Flow File Upload <= 2.5.2

Fixed in:

2.5.3

Referenced CVEs: CVE-2015-10138 · 9.8

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from wpscan.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

CVE-2026-14548: Ray Enterprise Translation Plugin Unauth API Token Update via Missing Authorization 2026-08-11 WordPress Lingotek Translation <= 1.7.3 Missing Authorization to Add/Delete Languages (CVE-2026-14549) 2026-08-11 Pinpoint Booking System Unauthenticated Arbitrary Booking Price Manipulation Vulnerability 2026-08-10 s2member Pre-Auth Stored XSS via Shortcode (CVE-2026-15047) Advisory 2026-08-10 Hotel Booking Lite < 6.2.3 IDOR Vulnerability Advisory (CVE-2026-15238) 2026-08-10

Offline Archive

Offline screenshot & PDF are Pro-exclusive