← Back to CVE List
CVE-2014-5014
The WordPress Flash Uploader plugin before 3.1.3 for WordPress allows remote attackers to execute arbitrary commands via vectors related to invalid characters in image_magic_path.
> MITRE Terms of Use apply – see LICENSE‑MITRE.txt