CVE-2012-3577

Nmedia Member Conversation < 1.4 - Unauthenticated Arbitrary File Upload via doupload.php

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2012-3577. PoCs published by Sammy FORGIT.

AI-analyzed exploit summary This exploit leverages an arbitrary file upload vulnerability in the Nmedia WordPress Member Conversation plugin (CVE-2012-3577). It uses cURL to upload a PHP file (lo.php) to a vulnerable endpoint, allowing remote code execution (RCE) via the uploaded file.

Description

Unrestricted file upload vulnerability in doupload.php in the Nmedia Member Conversation plugin before 1.4 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in wp-content/uploads/user_uploads.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Sammy FORGIT · phpwebappsphp
https://www.exploit-db.com/exploits/37353

This exploit leverages an arbitrary file upload vulnerability in the Nmedia WordPress Member Conversation plugin (CVE-2012-3577). It uses cURL to upload a PHP file (lo.php) to a vulnerable endpoint, allowing remote code execution (RCE) via the uploaded file.

Classification
Working Poc 90%
Attack Type
Rce
Complexity
Trivial
Reliability
Reliable
Target: Nmedia WordPress Member Conversation 1.35.0
No auth needed
Prerequisites: Target running vulnerable plugin · Access to the upload endpoint
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (6)

Core 6

Scores

EPSS 0.1296
EPSS Percentile 95.8%

Details

CWE
CWE-264
Status published
Products (3)
nmedia/member_conversation 1.0
nmedia/member_conversation 1.2
nmedia/member_conversation < 1.3
Published Jun 17, 2012
Tracked Since Feb 18, 2026