CVE-2020-12800
82Vexday Risk Score
Patch now. It exploitation observed by VulnCheck and has a working public exploit.
ssvc Actepss 79%
from disclosure to weapon0 days
Published on NVDJun 8
1st PoCMay 15
metasploitMay 11
VulnCheck+308d
exploitation probability
79%top 1% of all CVEs
observed exploitation
yesVulnCheck
1 public exploit(s)
The drag-and-drop-multiple-file-upload-contact-form-7 plugin before 1.3.3.3 for WordPress allows Unrestricted File Upload and remote code execution by setting supported_type to php% and uploading a .php% file.
Affected products
n/a · n/apublic PoCs found — 1
vulncheckvulncheck.com/xdb/ce754ffc08e4unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.