{"vulnerability": "CVE-2015-10140", "sightings": [{"uuid": "31fce3a2-28e8-4b96-b1a9-6a202d6d32bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-10140", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lul6ed7lfa2j", "content": "", "creation_timestamp": "2025-07-22T18:51:31.068729Z"}, {"uuid": "bac673fa-9ad2-433f-aab2-8cde67bb9d97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-10140", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:12:57.000000Z"}, {"uuid": "1a254b7c-34f9-4769-a84b-d800936ef1cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-10140", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/wp_ajax_load_more_file_upload.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "fa075d2a-c30e-466f-a6f1-5d98f58c7db7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-10140", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/wp_ajax_load_more_file_upload.rb", "content": "{\"aliases\": [], \"arch\": \"php\", \"author\": [\"PizzaHatHacker\", \"Roberto Soares Espreto \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an arbitrary file upload in the WordPress Ajax Load More\\n          version 2.8.1.1. It allows to upload arbitrary php files and get remote code\\n          execution. This module has been tested successfully on WordPress Ajax Load More\\n          2.8.0 with Wordpress 4.1.3 on Ubuntu 12.04/14.04 Server.\", \"disclosure_date\": \"2015-10-10\", \"fullname\": \"exploit/unix/webapp/wp_ajax_load_more_file_upload\", \"is_install_path\": true, \"mod_time\": \"2025-10-06 17:15:11 +0000\", \"name\": \"Wordpress Ajax Load More PHP Upload Vulnerability\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/unix/webapp/wp_ajax_load_more_file_upload.rb\", \"platform\": \"PHP\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"unix/webapp/wp_ajax_load_more_file_upload\", \"references\": [\"CVE-2015-10140\", \"WPVDB-8209\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Ajax Load More 2.8.1.1\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:49.891854Z"}]}