CVE-2015-2194

Unrestricted file upload vulnerability in the fusion_options function in functions.php in the Fusion theme 3.1 for Wordpress allows remote authenticated users…

published March 3, 2015

CVSS
—
EPSS
3%
Percentile
87.9
In the wild
Unconfirmed
What it is

Unrestricted file upload vulnerability in the fusion_options function in functions.php in the Fusion theme 3.1 for Wordpress allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension in a fusion_save action, then accessing it via unspecified vectors.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03189 · 87.9th percentile
Published
2015-03-03T19:00Z
EPSS history
Timeline
  • 03 MAR 19:00Z
    Unrestricted file upload vulnerability in the fusion_options function in functions.php in the Fusion theme 3.1 for Wordpress allows remote authenticated users…
    cvelistv5