CVE-2012-10020 FoxyPress <= 0.4.2.1 - Arbitrary File Upload

Q: What is CVE-2012-10020?

CVE-2012-10020 is a critical vulnerability in WebMovementLLC FoxyPress, published on 22 Jul 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.

Q: Is CVE-2012-10020 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2012-10020 exists.

Q: How do I fix CVE-2012-10020?

No fix has been published for CVE-2012-10020 yet. Limit exposure of the affected software until one is available.

Critical 9.8 Published 22 Jul 2025 Updated 8 Apr 2026

Unauthenticated attackers can upload arbitrary files via FoxyPress, potentially leading to remote code execution on the server.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2012-10020?

CVE-2012-10020 is a critical vulnerability in WebMovementLLC FoxyPress, published on 22 Jul 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

The FoxyPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the uploadify.php file in versions up to, and including, 0.4.2.1. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected sites server which may make remote code execution possible.

Weakness: CWE-434

Which versions are affected by CVE-2012-10020?

It affects 1 product.

Products include Webmovementllc Foxypress.

How do I fix CVE-2012-10020?

No fix has been published for CVE-2012-10020 yet. Limit exposure of the affected software until one is available.

Is CVE-2012-10020 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2012-10020 exists.

Public exploit code: 1 Metasploit module.

Sources

Also known as GHSA-jj57-5w64-pjmg.