Critical severity9.8NVD Advisory· Published Jul 19, 2025· Updated Jun 16, 2026

CVE-2012-10019

Description

The Front End Editor plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via the upload.php file in versions before 2.3. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected sites server which may make remote code execution possible.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Front Editorllm-fuzzy
Range: <2.3
Package: https://wordpress.org/plugins/front-editor
scribu/Front-end Editorv5
Range: 0

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/132303/nvdExploitThird Party AdvisoryVDB Entry
web.archive.org/web/20120712205339/https%3A//www.opensyscom.fr/Actualites/wordpress-plugins-front-end-editor-arbitrary-file-upload-vulnerability.htmlnvdExploitThird Party Advisory
www.cybersecurity-help.cz/vdb/SB2012070701nvdThird Party Advisory
www.wordfence.com/threat-intel/vulnerabilities/id/f271c2e7-9d58-4dea-95d3-3ffc4ec7c3b2nvdThird Party Advisory
plugins.trac.wordpress.org/changesetnvdProduct

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.002
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000