CVE-2012-3575

no score yetEPSS 15%

Unrestricted file upload vulnerability in uploader.php in the RBX Gallery plugin 2.1 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in uploads/rbxslider.

EPSS: 15% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)
CWE: CWE-264
Published: 2012-06-16
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

rbx_gallery:rbx_gallery

References

http://secunia.com/advisories/49463
http://www.exploit-db.com/exploits/19019
http://www.opensyscom.fr/Actualites/wordpress-plugins-rbx-gallery-multiple-arbitrary-file-upload-vulnerability.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/76170
http://secunia.com/advisories/49463

Check your stack JSON