Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-68923
HistoryJul 09, 2021 - 12:00 a.m.

WordPress WP Upload Restriction plugin access control error vulnerability

2021-07-0900:00:00
China National Vulnerability Database
www.cnvd.org.cn
5

0.001 Low

EPSS

Percentile

22.7%

WordPress is a set of blogging platforms developed by the WordPress (Wordpress) Foundation using the PHP language. The platform supports the hosting of personal blog sites on servers with PHP and MySQL. WordPress WP Upload Restriction plugin 2.2.3 and earlier versions contain an access control error vulnerability that stems from a network system or product that does not properly restrict access to resources from unauthorized roles. An attacker could exploit this vulnerability to allow a low-level authenticated user to view custom extensions added by the administrator.

0.001 Low

EPSS

Percentile

22.7%