CVE-2015-10087

HOCH 8.8CVE-2015-10087 · Published 07/03/2023 · updated 17/06/2026

Kurz gesagt

CVE-2015-10087 ist eine Schwachstelle (HOCH (CVSS 8.8)) in designfolio-plus (upthemes).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 1.1%, höher als bei 67.0% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
designfolio-plus upthemes	`≤ 1.2`	No fix yet

Description

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability has been found in UpThemes Theme DesignFolio Plus 1.2 on WordPress and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of the patch is 53f6ae62878076f99718e5feb589928e83c879a9. It is recommended to apply a patch to fix this issue. The identifier VDB-221809 was assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

References

CCrashBandicot/exploit commit 53f6ae6 · Patch
support.alertlogic.com/hc/en-us/articles/360028203692-WordPress-Theme-DesignFolio-Plus-1-2-upload-file-php-Arbitrary-File-Upload · Third Party Advisory
vuldb.com · Third Party Advisory
vuldb.com · Third Party Advisory
exploit-db.com/exploits/36372 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free