Unrated severityNVD Advisory· Published Jan 29, 2012· Updated Jun 16, 2026
CVE-2012-0934
CVE-2012-0934
Description
PHP remote file inclusion vulnerability in ajax/savetag.php in the Theme Tuner plugin for WordPress before 0.8 allows remote attackers to execute arbitrary PHP code via a URL in the tt-abspath parameter.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
7cpe:2.3:a:zingiri:theme_tuner_plugin:*:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:a:zingiri:theme_tuner_plugin:*:*:*:*:*:*:*:*range: <=0.7
- cpe:2.3:a:zingiri:theme_tuner_plugin:0.1:*:*:*:*:*:*:*
- cpe:2.3:a:zingiri:theme_tuner_plugin:0.2:*:*:*:*:*:*:*
- cpe:2.3:a:zingiri:theme_tuner_plugin:0.3:*:*:*:*:*:*:*
- cpe:2.3:a:zingiri:theme_tuner_plugin:0.4:*:*:*:*:*:*:*
- cpe:2.3:a:zingiri:theme_tuner_plugin:0.6:*:*:*:*:*:*:*
- Range: <0.8
Patches
Vulnerability mechanics
References
6- wordpress.org/extend/plugins/theme-tuner/changelog/nvdPatch
- spareclockcycles.org/2011/09/18/exploitring-the-wordpress-extension-repos/nvdExploit
- secunia.com/advisories/47722nvdVendor Advisory
- plugins.trac.wordpress.org/changeset/492167/theme-tunernvd
- www.securityfocus.com/bid/51636nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/72626nvd
News mentions
0No linked articles in our index yet.