WF
Product
Wordpress File Upload Pro
5
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 4Low 0
Watch
Add Wordpress File Upload Pro to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-24962 | 8.8 | Mar 28 | The WordPress File Upload Free and Pro WordPress plugins before 4.16.3 allow users with a role as low as Contributor to perform path traversal via a shortcode argument, which can… Affected: before 4.16.3 |
| CVE-2023-2767 | 5.5 | Jun 9 | WordPress File Upload / WordPress File Upload Pro <= 4.19.1 - Authenticated (Administrator+) Stored Cross-Site Scripting Affected: through 4.19.1 |
| CVE-2021-24961 | 5.4 | Mar 7 | The WordPress File Upload WordPress plugin before 4.16.3, wordpress-file-upload-pro WordPress plugin before 4.16.3 does not escape some of its shortcode argument, which could… Affected: before 4.16.3 |
| CVE-2021-24960 | 5.4 | Mar 7 | The WordPress File Upload WordPress plugin before 4.16.3, wordpress-file-upload-pro WordPress plugin before 4.16.3 allows users with a role as low as Contributor to configure the… Affected: before 4.16.3 |
| CVE-2023-2688 | 4.9 | Jun 9 | WordPress File Upload / WordPress File Upload Pro <= 4.19.1 - Authenticated (Administrator+) Path Traversal Affected: through 4.19.1 |
Showing 5
