WF
Product
Wordpress File Upload
25
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 6Medium 14Low 1
Watch
Add Wordpress File Upload to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-24962 | 8.8 | Mar 28 | The WordPress File Upload Free and Pro WordPress plugins before 4.16.3 allow users with a role as low as Contributor to perform path traversal via a shortcode argument, which can… Affected: before 4.16.3 |
| CVE-2024-9939 | 7.5 | Jan 8 | WordPress File Upload <= 4.24.13 - Unauthenticated Path Traversal to Arbitrary File Read in wfu_file_downloader.php Affected: before 4.24.14 |
| CVE-2015-9340 | 7.5 | Aug 22 | The wp-file-upload plugin before 3.0.0 for WordPress has insufficient restrictions on upload of php, js, pht, php3, php4, php5, phtml, htm, html, and htaccess files Affected: before 3.0.0 |
| CVE-2015-9339 | 7.5 | Aug 22 | The wp-file-upload plugin before 2.7.1 for WordPress has insufficient restrictions on upload of .js files Affected: before 2.7.1 |
| CVE-2015-9338 | 7.5 | Aug 22 | The wp-file-upload plugin before 2.5.0 for WordPress has insufficient restrictions on upload of .php files Affected: before 2.5.0 |
| CVE-2015-9341 | 7.5 | Aug 22 | The wp-file-upload plugin before 3.4.1 for WordPress has insufficient restrictions on upload of .php.js files Affected: before 3.4.1 |
Showing 6