CVE-2013-4144: There is an object injection vulnerability in swfupload plugin for wordpress

Critical severity · published Jun 30, 2022

CVE-2013-4144

There is an object injection vulnerability in swfupload plugin for wordpress

9.8

CVSS

EPSS

On KEV

Description

There is an object injection vulnerability in swfupload plugin for wordpress.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack vector

Network

Complexity

Low

Privileges

None

User interaction

None

Confidentiality

High

Integrity

High

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)1.0% · higher than 64% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Swfupload · Swfupload Project

3.5.2 · source: NVD

Affected product

Swfupload

Swfupload Project

All Swfupload CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2013-4144

CVE.org

https://www.cve.org/CVERecord?id=CVE-2013-4144

Issue Tracking

https://github.com/wordpress/secure-swfupload/issues/1

Mailing List

https://www.openwall.com/lists/oss-security/2013/07/18/10