Is CVE-2012-5318 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Kishore Asokan Kish Guest Posting Plugin

CVE-2012-5318

Unrestricted file upload vulnerability in uploadify/scripts/uploadify.php in the Kish Guest Posting plugin 1.2 for WordPress allows remote attackers to execute arbitrary code by uploading a file with a double extension, then accessing it via a direct request to the file in the directory specified by the folder parameter. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-1125.

EPSS: 0.065 (93.1th percentile) — read the EPSS interpretation.

Affected products

Kishore_asokan Kish_guest_posting_plugin — versions 1.2
Wordpress
N/a — versions n/a

Public proof-of-concept exploits

20142995/nuclei-templates

References

cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
cve@mitre.org (mailing-list, x_refsource_MLIST)

Frequently asked questions

What is CVE-2012-5318?: CVE-2012-5318 is a vulnerability in Kishore Asokan Kish Guest Posting Plugin. Published 2012-10-08.
Is CVE-2012-5318 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.