VULNERABILITY INTELLIGENCE

CVE-2012-10064

CVSS score9.3 CRITICAL

EPSS probability56.61%

CISA KEVNot currently listed

Published2026-01-16

Last modified2026-06-16

Description

Omni Secure Files plugin versions prior to 0.1.14 contain an arbitrary file upload vulnerability in the bundled plupload example endpoint. The /wp-content/plugins/omni-secure-files/plupload/examples/upload.php handler allows unauthenticated uploads without enforcing safe file type restrictions, enab... .