« Back to list

CVE-2012-1786

Status: ModifiedMedium (5)—

The Media Upload form in the Video Embed & Thumbnail Generator plugin before 2.0 for WordPress allows remote attackers to obtain the installation path via unknown vectors.

CVSS

Exploitation probability (EPSS)

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

Affected technologies (1)

Kylegilman — Video Embed & Thumbnail Generator

CWEs

References

Raw JSON (NVD)

Show
{
  "id": "CVE-2012-1786",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2012-03-19T18:55:03.373",
  "references": [
    {
      "url": "http://plugins.trac.wordpress.org/changeset?old_path=%2Fvideo-embed-thumbnail-generator&old=507924&new_path=%2Fvideo-embed-thumbnail-generator&new=507924",
      "tags": [
        "Patch"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://wordpress.org/extend/plugins/video-embed-thumbnail-generator/changelog/",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/52652",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://plugins.trac.wordpress.org/changeset?old_path=%2Fvideo-embed-thumbnail-generator&old=507924&new_path=%2Fvideo-embed-thumbnail-generator&new=507924",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://wordpress.org/extend/plugins/video-embed-thumbnail-generator/changelog/",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/52652",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Media Upload form in the Video Embed & Thumbnail Generator plugin before 2.0 for WordPress allows remote attackers to obtain the installation path via unknown vectors."
    },
    {
      "lang": "es",
      "value": "El formulario de subida de contenido multimedia del complemento Video Embed & Thumbnail Generator anteriores a la versión 2.0 para WordPress permite a atacantes remotos obtener la ruta de instalación a través de vectores sin especificar."
    }
  ],
  "lastModified": "2026-06-16T23:40:18.383",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:kylegilman:video_embed_\\&_thumbnail_generator:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0C989F18-D9AC-44BE-BCA1-3F5C49160DF6",
              "versionEndIncluding": "1.1"
            },
            {
              "criteria": "cpe:2.3:a:kylegilman:video_embed_\\&_thumbnail_generator:0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5EBC2076-AA14-4E18-8851-94AC7AB6C084"
            },
            {
              "criteria": "cpe:2.3:a:kylegilman:video_embed_\\&_thumbnail_generator:0.2.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3685E933-F049-4961-8151-65ED2EAB3085"
            },
            {
              "criteria": "cpe:2.3:a:kylegilman:video_embed_\\&_thumbnail_generator:1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B9490138-6C21-42DA-B29B-B83D7C7B6B20"
            },
            {
              "criteria": "cpe:2.3:a:kylegilman:video_embed_\\&_thumbnail_generator:1.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "15CDBA22-9614-4AFC-BA2A-8E6D21C7CAEA"
            },
            {
              "criteria": "cpe:2.3:a:kylegilman:video_embed_\\&_thumbnail_generator:1.0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "89E4C329-E20A-4849-AB41-4A45B8AFE0D2"
            },
            {
              "criteria": "cpe:2.3:a:kylegilman:video_embed_\\&_thumbnail_generator:1.0.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5755FA68-3576-44D7-B8FA-7BE656DB5250"
            },
            {
              "criteria": "cpe:2.3:a:kylegilman:video_embed_\\&_thumbnail_generator:1.0.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "30621B6E-385F-4C19-984B-7C1227BCFDFF"
            },
            {
              "criteria": "cpe:2.3:a:kylegilman:video_embed_\\&_thumbnail_generator:1.0.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3E2FB9A0-FBBF-4A47-A659-CA3B2CEEABD8"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "847DA578-4655-477E-8A6F-99FBE738E4F9"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}