VULNERABILITY INTELLIGENCE

CVE-2008-2392

CVSS score9 HIGH
EPSS probability4.28%
CISA KEVNot currently listed
Published2008-05-21
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:S/C:C/I:C/A:C

Description

Unrestricted file upload vulnerability in WordPress 2.5.1 and earlier might allow remote authenticated administrators to upload and execute arbitrary PHP files via the Upload section in the Write Tabs area of the dashboard.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references