CVE-2011-10041
Last modified
CVE-2011-10041 is a critical-severity vulnerability rated 9.3/10 on the CVSS scale. Uploadify WordPress plugin versions up to and including 1.0 contain an arbitrary file upload vulnerability in process_upload.php due to missing file type validation. An unauthenticated remote attacker can upload arbitrary files to the affected WordPress site, which may allow remote code execution by uploading executable content to a web-accessible location.. EPSS estimates a 0.80% chance of exploitation in the next 30 days.
Description
Uploadify WordPress plugin versions up to and including 1.0 contain an arbitrary file upload vulnerability in process_upload.php due to missing file type validation. An unauthenticated remote attacker can upload arbitrary files to the affected WordPress site, which may allow remote code execution by uploading executable content to a web-accessible location.
Metrics
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2011-10041?
How severe is CVE-2011-10041?
How do I fix CVE-2011-10041?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2011
- CVE-2011-10036Nagios XI versions prior to 2011R1.9 are vulnerable to cross…5.4
- CVE-2011-10037Nagios XI versions prior to 2011R1.9 are vulnerable to cross…5.4
- CVE-2011-10038Nagios XI versions prior to 2011R1.9 are vulnerable to cross…5.4
- CVE-2011-10039Nagios XI versions prior to 2011R1.9 are vulnerable to cross…5.4
- CVE-2011-1004The FileUtils.remove_entry_secure method in Ruby 1.8.6 throu…
- CVE-2011-10040Nagios XI versions prior to 2011R1.9 are vulnerable to cross…5.4
- CVE-2011-10043Module::Load versions before 0.22 for Perl allow arbitrary m…9.8
- CVE-2011-1005The safe-level feature in Ruby 1.8.6 through 1.8.6-420, 1.8.…
- CVE-2011-1006Heap-based buffer overflow in the parse_cgroup_spec function…
- CVE-2011-1007Best Practical Solutions RT before 3.8.9 does not perform ce…
- CVE-2011-1008Scrips_Overlay.pm in Best Practical Solutions RT before 3.8.…
- CVE-2011-1009Vanilla Forums 2.0.17.1 through 2.0.17.5 has XSS in /vanilla…6.1
Are you affected by CVE-2011-10041?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST