TI-2012-03297 CVE-2012-3814 · GHSA-pf7f-8qfr-vcg6Unrestricted file upload vulnerability in font-upload.php in the Font Uploader plugin…Priority MEDIUM 45Unrestricted file upload vulnerability in font-upload.php in the Font Uploader plugin 1.2.4 for WordPress allows remote attackers to execute arbitrary PHP code by uploading a PHP file with a .php.ttf extension, then acce…CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.10222 · Published 2012-06-27 · No fix listed CWE-264