Vendors / Infinite Uploads Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 1
Exploited now Infinite Uploads records in CISA KEV No Infinite Uploads vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 38
Cross-Site Request Forgery (CSRF) vulnerability in Infinite Uploads Big File Uploads – Increase Maximum File Upload Size plugin <= 2.1.1 versions.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00256 · Published 2023-11-22 · No fix listed CWE-352
Priority LOW 21
The Big File Uploads – Increase Maximum File Upload Size plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 2.1.2.
CVSS 3.1 MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00558 · Published 2024-09-07 · No fix listed CWE-200
Open these records in search → All records by CVSS severity
0 1 1 0 0
