TI-2014-04116 CVE-2014-5014 · GHSA-p2gr-mqhh-c93jThe WordPress Flash Uploader plugin before 3.1.3 for WordPress allows remote attackers to…Priority MEDIUM 48The WordPress Flash Uploader plugin before 3.1.3 for WordPress allows remote attackers to execute arbitrary commands via vectors related to invalid characters in image_magic_path.CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03502 · Published 2018-04-25 · No fix listed CWE-77