CVE-2007-3543: Medium severity WordPress WordPress vulnerability
Unrestricted file upload vulnerability in WordPress before 2.2.1 and WordPress MU before 1.2.3 allows remote authenticated users to upload and execute arbitrary PHP code by making a post that specifies a .php filename in the wpattachedfile metadata field; and then sending this file's content, along with its postID value, to (1) wp-app.php or (2) app.php.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-3543?
CVE-2007-3543 is classified as a high severity vulnerability due to its potential to allow remote code execution.
How do I fix CVE-2007-3543?
To fix CVE-2007-3543, upgrade WordPress to version 2.2.1 or later, or WordPress MU to version 1.2.3 or later.
Who is affected by CVE-2007-3543?
CVE-2007-3543 affects users of WordPress versions prior to 2.2.1 and WordPress MU versions prior to 1.2.3 with remote authenticated access.
What can attackers achieve with CVE-2007-3543?
Attackers can exploit CVE-2007-3543 to upload and execute arbitrary PHP code on vulnerable WordPress installations.
Is CVE-2007-3543 still a concern for current WordPress installations?
CVE-2007-3543 is not a concern for current WordPress installations if they are updated to the latest versions as the vulnerability has been patched.