CVE-2008-5220: Wportfolio

High severity, CVSS 10.0. EPSS: 14.3% chance of exploitation in the next 30 days.

Unrestricted file upload vulnerability in admin/upload_form.php in wPortfolio 0.3 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in admin/tmp/.

Affected products

• Wportfolio Wportfolio: up to and including 0.3; version 0.2 only

Published 2008-11-25. Last modified 2026-06-16.