CVE-2011-2933: Websitebaker

High severity, CVSS 7.2. EPSS: 1.1% chance of exploitation in the next 30 days.

An Arbitrary File Upload vulnerability exists in admin/media/upload.php in WebsiteBaker 2.8.1 and earlier due to a failure to restrict uploaded files with .htaccess, .php4, .php5, and .phtl extensions.

Affected products

• Websitebaker Websitebaker: up to and including 2.8.1

Published 2020-01-14. Last modified 2026-06-16.