CVE-2015-4133
CVSS Score Not Available
75.20%
HIGH RiskEPSS (99th percentile)
Unrestricted file upload vulnerability in admin/scripts/FileUploader/php.php in the ReFlex Gallery plugin before 3.1.4 for WordPress allows remote attackers to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via a direct request to the file in uploads/ directory.
Published: 5/28/2015
Modified: 4/12/2025
Vulnerability Summary
EPSS Score (Exploitation Probability)
75.20%HIGH Exploitation Risk
99th percentile
This vulnerability has a 75.20% probability of being exploited in the next 30 days, ranking higher than 99% of all scored CVEs.