UpHeron
All vulnerabilities

WordPress core

CVE-2008-2392

Unrestricted file upload vulnerability in WordPress 2.5.1 and earlier might allow remote authenticated administrators to upload and execute arbitrary PHP files via the Upload section in the Write Tabs area of the dashboard.

Severity
High 9.0
Published
21 May 2008
Last changed
16 Jun 2026
Added to UpHeron
17 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
WordPressWordPress core · cpe:a:wordpress:wordpress
  • Every version up to 2.5.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2008-2392
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2008-2392