VYPR
← All advisories
Unrated severityNVD Advisory· Published Sep 30, 2013· Updated Apr 29, 2026

CVE-2013-5963

CVE-2013-5963

Description

Unrestricted file upload vulnerability in multi.php in Simple Dropbox Upload plugin before 1.8.8.1 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in wp-content/uploads/wpdb/.

Affected products

24
  • Cdsincdesign/Simple Dropbox Upload Form24 versions
    cpe:2.3:a:cdsincdesign:simple_dropbox_upload_form:*:*:*:*:*:*:*:*+ 23 more
    • cpe:2.3:a:cdsincdesign:simple_dropbox_upload_form:*:*:*:*:*:*:*:*range: <=1.8.8
    • cpe:2.3:a:cdsincdesign:simple_dropbox_upload_form:0.5.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cdsincdesign:simple_dropbox_upload_form:1.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cdsincdesign:simple_dropbox_upload_form:1.1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cdsincdesign:simple_dropbox_upload_form:1.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:cdsincdesign:simple_dropbox_upload_form:1.1.2:*:*:*:*:*:*:*
    • cpe:2.3:a:cdsincdesign:simple_dropbox_upload_form:1.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cdsincdesign:simple_dropbox_upload_form:1.3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cdsincdesign:simple_dropbox_upload_form:1.3.1:*:*:*:*:*:*:*
    • cpe:2.3:a:cdsincdesign:simple_dropbox_upload_form:1.4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cdsincdesign:simple_dropbox_upload_form:1.5.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cdsincdesign:simple_dropbox_upload_form:1.5.1:*:*:*:*:*:*:*
    • cpe:2.3:a:cdsincdesign:simple_dropbox_upload_form:1.5.2:*:*:*:*:*:*:*
    • cpe:2.3:a:cdsincdesign:simple_dropbox_upload_form:1.5.3:*:*:*:*:*:*:*
    • cpe:2.3:a:cdsincdesign:simple_dropbox_upload_form:1.6.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cdsincdesign:simple_dropbox_upload_form:1.7.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cdsincdesign:simple_dropbox_upload_form:1.8.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cdsincdesign:simple_dropbox_upload_form:1.8.1:*:*:*:*:*:*:*
    • cpe:2.3:a:cdsincdesign:simple_dropbox_upload_form:1.8.2:*:*:*:*:*:*:*
    • cpe:2.3:a:cdsincdesign:simple_dropbox_upload_form:1.8.3:*:*:*:*:*:*:*
    • cpe:2.3:a:cdsincdesign:simple_dropbox_upload_form:1.8.4:*:*:*:*:*:*:*
    • cpe:2.3:a:cdsincdesign:simple_dropbox_upload_form:1.8.5:*:*:*:*:*:*:*
    • cpe:2.3:a:cdsincdesign:simple_dropbox_upload_form:1.8.6:*:*:*:*:*:*:*
    • cpe:2.3:a:cdsincdesign:simple_dropbox_upload_form:1.8.7:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

5

News mentions

0

No linked articles in our index yet.