Approved changes feed: RSS · Atom

cpe:2.3:a:steven:uploadify:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSteven (1343015a-933e-5eb3-8e8f-4a5f4cb7f800)
ProductUploadify (965bbed4-b29f-5c6f-9b19-3b99ee35bc43)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-10041 vulnerable 2026-06-08 04:56:40.627889 Uploadify <= 1.0 Unauthenticated Arbitrary File Upload
Uploadify WordPress plugin versions up to and including 1.0 contain an arbitrary file upload vulnerability in process_upload.php due to missing file type validation. An unauthenticated remote attacker can upload arbitrary files to the affected WordPress site, which may allow remote code execution by uploading executable content to a web-accessible location.
Published: 2026-01-15T21:44:33.566Z
Updated: 2026-05-14T02:06:03.789Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.