CVE-2012-1205

HIGH 7.5CVE-2012-1205 · Published 24/02/2012 · updated 16/06/2026

Package	Affected versions	Patched versions
relocate-upload alanft	`= 0.10= 0.11≤ 0.14`	No fix yet

Description

PHP remote file inclusion vulnerability in relocate-upload.php in Relocate Upload plugin before 0.20 for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter.

References

osvdb.org/79250
plugins.trac.wordpress.org/changeset/504380/relocate-upload · Exploit
secunia.com/advisories/47976 · Vendor Advisory
wordpress.org/extend/plugins/relocate-upload/changelog · Patch
securityfocus.com/bid/49693 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free