CVE-2013-5963

CVE-2013-5963 describes an unrestricted file upload vulnerability in the Simple Dropbox Upload plugin for WordPress, specifically affecting versions prior to 1.8.8.1. This flaw allows remote attackers to upload arbitrary executable files to the wp-content/uploads/wpdb/ directory, potentially leading to arbitrary code execution on the compromised server. The vulnerability carries a CVSS score of 6.8, indicating a medium severity. It can be exploited remotely with medium attack complexity and without authentication, potentially resulting in partial confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. Furthermore, the vulnerability has received minimal community discussion or media coverage, suggesting a low level of public awareness or interest.