TI-2014-04080 CVE-2014-4972 · GHSA-j9qg-6qfp-wh76Unrestricted file upload vulnerability in the Gravity Upload Ajax plugin 1.1 and earlier…Priority MEDIUM 50Unrestricted file upload vulnerability in the Gravity Upload Ajax plugin 1.1 and earlier for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it…CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.04652 · Published 2018-01-08 · No fix listed CWE-434