Vulnerability in Wordpress
CVE-2007-3544
Unrestricted file upload vulnerability in (1) wp-app.php and (2) app.php in WordPress 2.2.1 and WordPress MU 1.2.3 allows remote authenticated users to upload and execute arbitrary PHP code via unspecified vectors, possibly related to the…
EPSS: 0.018 (75.7th percentile) — read the EPSS interpretation.
Affected products
- Wordpress
- Wordpress Wordpress_mu
- N/a — versions n/a
Public proof-of-concept exploits
References
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)
Frequently asked questions
- What is CVE-2007-3544?
- CVE-2007-3544 is a vulnerability in Wordpress. Published 2007-07-03.
- Is CVE-2007-3544 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.