The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Unrestricted file upload vulnerability in doupload.php in the Nmedia Member Conversation plugin before 1.4 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in wp-content/uploads/user_uploads.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Wordpress Member Private Conversation Plugin | — | Update wordpress-member-private-conversation plugin to version 1.4, or a newer patched version | May 15, 2025 | Jun 5, 2012 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub