CVE-2012-0934

no score yetEPSS 8.1%

PHP remote file inclusion vulnerability in ajax/savetag.php in the Theme Tuner plugin for WordPress before 0.8 allows remote attackers to execute arbitrary PHP code via a URL in the tt-abspath parameter.

EPSS: 8.1% chance of exploitation in the next 30 days; higher than 94% of CVEs (scores of 2026-10-31)
CWE: CWE-94
Published: 2012-01-29
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

zingiri:theme_tuner_plugin

References

http://plugins.trac.wordpress.org/changeset/492167/theme-tuner#file2
http://secunia.com/advisories/47722
http://spareclockcycles.org/2011/09/18/exploitring-the-wordpress-extension-repos/
http://wordpress.org/extend/plugins/theme-tuner/changelog/
http://www.securityfocus.com/bid/51636

Check your stack JSON