CVE-2012-1125

CVE-2012-1125 describes an unrestricted file upload vulnerability in the Kish Guest Posting plugin (versions prior to 1.2) for WordPress. This flaw allows remote attackers to upload arbitrary files with PHP extensions, leading to potential arbitrary code execution. With a CVSS score of 6.8, this vulnerability is of medium severity, requiring moderate attack complexity but allowing unauthenticated attackers to achieve partial confidentiality, integrity, and availability impacts. While not on the CISA KEV catalog, an exploit is publicly available on ExploitDB, though there is no evidence of active exploitation or significant community discussion.