CVE-2012-6649: Malicious File Upload
Published Jan 23, 2020
·Updated
WordPress WP GPX Maps Plugin 1.1.21 allows remote attackers to execute arbitrary PHP code via improper file upload.
Affected Software
1 affected component
Devfarm Wp Gpx Maps Wordpress=1.1.21
Event History
Jan 23, 2020
CVE Published
via MITRE·09:53 PM
Data Sourced
via MITRE·09:53 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-6649?
CVE-2012-6649 has a critical severity rating due to its potential for remote code execution.
2
How do I fix CVE-2012-6649?
To fix CVE-2012-6649, update the WP GPX Maps Plugin to the latest version available.
3
What impact does CVE-2012-6649 have on my WordPress site?
CVE-2012-6649 allows remote attackers to upload and execute arbitrary PHP code, compromising the security of your WordPress site.
4
Is CVE-2012-6649 specific to certain versions of the WP GPX Maps Plugin?
Yes, CVE-2012-6649 specifically affects version 1.1.21 of the WP GPX Maps Plugin.
5
Can CVE-2012-6649 lead to a website takeover?
Yes, successful exploitation of CVE-2012-6649 can result in a complete takeover of the affected WordPress site.