Lucene search
Veracode Vulnerability DatabaseVERACODE:8040HistoryDec 17, 2018 - 10:10 a.m.
Unrestricted File Upload
2018-12-1710:10:53
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.002 Low
EPSS
Percentile
53.1%
wordpress is vulnerable to unrestricted file upload. The MIME type of a file upload is not validated to match its file contents and extension, which would allow a remote attacker to upload a malicious file to perform cross-site scripting attacks.
| CPE | Name | Operator | Version |
|---|---|---|---|
| johnpbloch/wordpress-core | eq | 5.0.0 | |
| johnpbloch/wordpress-core | le | 4.9.8 |
Related
debiancve
debiancve
CVE-2018-20152
2018-12-14 20:29:00
cvelist
cvelist
CVE-2018-20152
2018-12-14 20:00:00
ubuntucve
ubuntucve
CVE-2018-20152
2018-12-14 00:00:00
nvd
nvd
CVE-2018-20152
2018-12-14 20:29:00
prion
prion
Input validation
2018-12-14 20:29:00
cve
cve
CVE-2018-20152
2018-12-14 20:29:00
wpvulndb
wpvulndb
WordPress <= 5.0 - Authenticated Post Type Bypass
2018-12-13 00:00:00
osv
osv
CVE-2018-20152
2018-12-14 20:29:00
wordpress - security update
2019-02-11 00:00:00
wordpress - security update
2019-03-01 00:00:00
debian
debian
[SECURITY] [DLA 1673-1] wordpress security update
2019-02-11 23:24:13
[SECURITY] [DSA 4401-1] wordpress security update
2019-03-01 07:03:31
[SECURITY] [DSA 4401-1] wordpress security update
2019-03-01 07:03:31
nessus
nessus
WordPress < 4.9.9 / 5.x < 5.0.1 Multiple Vulnerabilities
2018-12-13 00:00:00
Debian DLA-1673-1 : wordpress security update
2019-02-12 00:00:00
Debian DSA-4401-1 : wordpress - security update
2019-03-04 00:00:00
openvas
openvas
WordPress Multiple Vulnerabilities (Dec 2018) - Windows
2018-12-17 00:00:00
WordPress Multiple Vulnerabilities (Dec 2018) - Linux
2018-12-17 00:00:00
Debian: Security Advisory (DSA-4401-1)
2019-02-28 00:00:00