CVE-2021-34626

The CVE-2021-34626 issue affects the WordPress plugin WP Upload Restriction , specifically versions 2.2.3 and prior . The root cause is a missing access control in the deleteCustomType function, allowing low‑level authenticated users to delete custom extensions added by administrators. Documented...

CVE-2021-34627

The CVE refers to WP Upload Restriction WordPress plugin vulnerability in getSelectedMimeTypesByRole, affecting versions 2.2.3 and earlier. The issue allows a low‑level authenticated user to view custom extensions added by administrators, indicating an access‑control weakness in the role/ mime-ty...

CVE-2021-34625

The CVE-2021-34625 issue affects the WordPress WP Upload Restriction plugin (versions