Unrated severityNVD Advisory· Published Feb 24, 2012· Updated Jun 16, 2026
CVE-2012-1205
CVE-2012-1205
Description
PHP remote file inclusion vulnerability in relocate-upload.php in Relocate Upload plugin before 0.20 for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4cpe:2.3:a:alanft:relocate-upload:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:alanft:relocate-upload:*:*:*:*:*:*:*:*range: <=0.14
- cpe:2.3:a:alanft:relocate-upload:0.10:*:*:*:*:*:*:*
- cpe:2.3:a:alanft:relocate-upload:0.11:*:*:*:*:*:*:*
- Range: <0.20
Patches
Vulnerability mechanics
References
5- wordpress.org/extend/plugins/relocate-upload/changelog/nvdPatch
- plugins.trac.wordpress.org/changeset/504380/relocate-uploadnvdExploitPatch
- www.securityfocus.com/bid/49693nvdExploit
- secunia.com/advisories/47976nvdVendor Advisory
- osvdb.org/79250nvd
News mentions
0No linked articles in our index yet.