Wordpress File Upload Security Vulnerabilities and Issues — Wordpress File Upload CVE List

Lucene search

IptanusWordpress File Upload

3 matches found

CVE•added 2023/10/16 8:15 p.m.•84 views

CVE-2023-4811

The WordPress File Upload WordPress plugin before 4.23.3 does not sanitise and escape some of its settings, which could allow high privilege users such as contributors to perform Stored Cross-Site Scripting attacks.

5.4CVSS5.1AI score0.00103EPSS

CVE•added 2023/06/09 6:16 a.m.•43 views

CVE-2023-2688

The WordPress File Upload and WordPress File Upload Pro plugins for WordPress are vulnerable to Path Traversal in versions up to, and including, 4.19.1 via the vulnerable parameter wfu_newpath. This allows administrator-level attackers to move files uploaded with the plugin (located in wp-content/u...

4.9CVSS5.5AI score0.00161EPSS

CVE•added 2023/06/09 6:16 a.m.•31 views

CVE-2023-2767

The WordPress File Upload and WordPress File Upload Pro plugins for WordPress are vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 4.19.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wit...

5.5CVSS5.3AI score0.00101EPSS