Skip to content

Product

holding pattern project holding pattern vulnerabilities

1 published CVE affecting holding pattern project holding pattern, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest holding pattern project holding pattern CVEs

Newest publication first

  1. CVE-2015-1172 Holding Pattern <= 0.6 - Arbitrary File Upload

    Published
    HighCVSS 7.5 EPSS 58.3% Framework module Public exploit

    Unrestricted file upload vulnerability in admin/upload-file.php in the Holding Pattern theme (aka holding_pattern) 0.6 and earlier for WordPress allows remote attackers to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via a direct request...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.