CVE-2015-1172
holding pattern project holding pattern: no CVSS score yet. EPSS 58% chance of exploitation in the next 30 days.
Unrestricted file upload vulnerability in admin/upload-file.php in the Holding Pattern theme (aka holding_pattern) 0.6 and earlier for WordPress allows remote attackers to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via a direct request to the file in an unspecified directory.
- EPSS
- 58% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- holding_pattern_project:holding_pattern