CVE-2012-3578

MEDIUM 6.8CVE-2012-3578 · Published 17/06/2012 · updated 16/06/2026

In short

CVE-2012-3578 is a MEDIUM (CVSS 6.8) vulnerability affecting fcchat widget (wordpress).
Chance of exploitation in the next 30 days (EPSS): 8.3%, higher than 94.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
fcchat widget wordpress	`≤ 2.2.13.1`	No fix yet

Description

Unrestricted file upload vulnerability in html/Upload.php in the FCChat Widget plugin 2.2.13.1 and earlier for WordPress allows remote attackers to execute arbitrary code by uploading a file with a file with an executable extension followed by a safe extension, then accessing it via a direct request to the file in html/images.

References

packetstormsecurity.org/files/113323/WordPress-FCChat-Widget-2.x-Shell-Upload.html · Exploit
secunia.com/advisories/49419 · Vendor Advisory
opensyscom.fr/Actualites/wordpress-plugins-fcchat-widget-shell-upload-vulnerability.html · Exploit
securityfocus.com/bid/53855 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/76123

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free