wordpress-file-upload-pro vulnerabilities | LiveThreat CVE Feed

Product

wordpress-file-upload-pro

by · last CVE Jun 9, 2023

CVEs

On KEV

8.8

Max CVSS

New 30D

Severity mix

Critical 0High 1Medium 4Low 0

Severity

Exploitation

Watch

Add wordpress-file-upload-pro to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2023-2767	5.5	0%	Jun 9	WordPress File Upload / WordPress File Upload Pro <= 4.19.1 - Authenticated (Administrator+) Stored Cross-Site Scripting Affected: through 4.19.1
CVE-2021-24961	5.4	1%	Mar 7	WordPress File Upload < 4.16.3 - Contributor+ Stored Cross-Site Scripting via Shortcode Affected: 4.16.3 before 4.16.3
CVE-2021-24960	5.4	1%	Mar 7	WordPress File Upload < 4.16.3 - Contributor+ Stored Cross-Site Scripting via Malicious SVG Affected: 4.16.3 before 4.16.3
CVE-2023-2688	4.9	2%	Jun 9	WordPress File Upload / WordPress File Upload Pro <= 4.19.1 - Authenticated (Administrator+) Path Traversal Affected: through 4.19.1