Vulnerability Details CVE-2014-4972
Unrestricted file upload vulnerability in the Gravity Upload Ajax plugin 1.1 and earlier for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file under wp-content/uploads/gravity_forms.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.094
EPSS Ranking 92.4%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
References
Products affected by CVE-2014-4972
-
cpe:2.3:a:ajax_upload_for_gravity_forms_project:ajax_upload_for_gravity_forms:1.0
-
cpe:2.3:a:ajax_upload_for_gravity_forms_project:ajax_upload_for_gravity_forms:1.1