Unrated severityNVD Advisory· Published May 3, 2007· Updated Jun 16, 2026

CVE-2007-2485

Description

PHP remote file inclusion vulnerability in myflash-button.php in the myflash 1.00 and earlier plugin for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the wpPATH parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Ruben Boelinger/Myflash
cpe:2.3:a:ruben_boelinger:myflash:*:*:*:*:*:*:*:*
Range: <=1.00
WordPress/myflashllm-create
Range: <=1.00

Patches

Vulnerability mechanics

References

alexrabe.boelinger.comnvdPatch
www.securityfocus.com/bid/23749nvdExploitPatch
osvdb.org/34359nvd
www.vupen.com/english/advisories/2007/1616nvd
exchange.xforce.ibmcloud.com/vulnerabilities/34000nvd
www.exploit-db.com/exploits/3828nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.044
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000