CVE-2012-1205: Alanft Relocate-Upload

High severity, CVSS 7.5. EPSS: 24.8% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in relocate-upload.php in Relocate Upload plugin before 0.20 for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter.

Affected products

• Alanft Relocate-Upload: up to and including 0.14; version 0.10 only; version 0.11 only

Published 2012-02-24. Last modified 2026-06-16.