Full title: Wordpress Work-The-Flow Plugin 2.5.2 Upload Exploit Category: remote exploits Platform: php This Metasploit module exploits an arbitrary PHP code upload in the WordPress Work The Flow plugin, version 2.5.2. The vulnerability allows for arbitrary file upload and remote code execution. # 0day.today @ http://0day.today/