CVE-2012-1010

Published: Feb 7, 2012Modified: Apr 29, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Unrestricted file upload vulnerability in actions.php in the AllWebMenus plugin before 1.1.8 for WordPress allows remote attackers to execute arbitrary PHP code by uploading a ZIP file containing a PHP file, then accessing it via a direct request to the file in an unspecified directory.

Affected (22)

Products: Likno: Allwebmenus Plugin

Likno

1 product

Allwebmenus Plugin

Configuration A

22 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Likno Allwebmenus Plugin	Up to 1.1.7
Likno Allwebmenus Plugin	Version 1.0.10
Likno Allwebmenus Plugin	Version 1.0.11
Likno Allwebmenus Plugin	Version 1.0.12
Likno Allwebmenus Plugin	Version 1.0.17
Likno Allwebmenus Plugin	Version 1.0.18
Likno Allwebmenus Plugin	Version 1.0.19
Likno Allwebmenus Plugin	Version 1.0.1
Likno Allwebmenus Plugin	Version 1.0.20
Likno Allwebmenus Plugin	Version 1.0.21
Likno Allwebmenus Plugin	Version 1.0.22
Likno Allwebmenus Plugin	Version 1.0.23
Likno Allwebmenus Plugin	Version 1.0.24
Likno Allwebmenus Plugin	Version 1.0.3
Likno Allwebmenus Plugin	Version 1.0.4
Likno Allwebmenus Plugin	Version 1.0.9
Likno Allwebmenus Plugin	Version 1.1.1
Likno Allwebmenus Plugin	Version 1.1.2
Likno Allwebmenus Plugin	Version 1.1.3
Likno Allwebmenus Plugin	Version 1.1.4
Likno Allwebmenus Plugin	Version 1.1.5
Likno Allwebmenus Plugin	Version 1.1.6