CVE-2008-2392

CRITICAL 9.0CVE-2008-2392 · Published 21/05/2008 · updated 16/06/2026

Package	Affected versions	Patched versions
wordpress wordpress	`≤ 2.5.1`	No fix yet

Description

Unrestricted file upload vulnerability in WordPress 2.5.1 and earlier might allow remote authenticated administrators to upload and execute arbitrary PHP files via the Upload section in the Write Tabs area of the dashboard.

References

securityreason.com/securityalert/3897 · Third Party Advisory
securityfocus.com/archive/1/492230/100/0/threaded · Third Party Advisory
securityfocus.com/bid/29276 · Third Party Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/42561 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free