CVE-2015-9340

The CVE-2015-9340 entry refers to the WordPress wp-file-upload plugin prior to 3.0.0, which has insufficient restrictions on uploading PHP, JS, and related script/markup files (php5, phtml, html, htaccess, etc.). The connected Red Hat, CNVD/CVE, CVE records and WPVulnDB entry corroborate this iss...

CVE-2015-9341

The CVE-2015-9341 entry concerns the WordPress wp-file-upload plugin. Affected component: wp-file-upload plugin for WordPress (versions prior to 3.4.1). Root cause: insufficient restrictions on uploads of .php.js files, enabling potentially executable payloads via file upload. Documented impact: ...

CVE-2015-9338

CVE-2015-9338 affects the WordPress wp-file-upload plugin prior to version 2.5.0. The vulnerability arises from insufficient restrictions on uploading PHP files, allowing potentially harmful PHP uploads through the plugin. Affected product is the wp-file-upload plugin for WordPress; root cause is...

CVE-2015-9339

The CVE-2015-9339 entry concerns the WordPress wp-file-upload plugin, affected up to versions prior to 2.7.1. The root cause described across connected sources is insufficient restrictions on uploading JavaScript (.js) files. Exploitation details or real-world impact are not provided in the docum...