CVE-2012-2401

CVE-2012-2401 describes a vulnerability in Plupload versions prior to 1.5.4, including its use in WordPress before 3.3.2. This flaw allows remote attackers to bypass the Same Origin Policy by enabling scripting regardless of the SWF content's origin, due to improper domain validation. The vulnerability has a CVSS score of 5.0, indicating a medium severity. It is a network-based attack with low complexity and requires no authentication, potentially leading to partial integrity impact. There is no evidence of active exploitation, and no public exploit code is available on platforms like Metasploit or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting it has not garnered significant attention.