Read the docs

N5 Upload Form Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

N5 Upload Form Project records in CISA KEV

No N5 Upload Form Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
N5 Upload Form 1 record MEDIUM

Records

1 record in N5 Upload Form · all components

TI-2021-06515 CVE-2021-24223 · GHSA-xhj6-6rx2-q3f4

N5 Upload Form <= 1.0 - Unauthenticated Arbitrary File Upload to RCE

Priority MEDIUM 46

The N5 Upload Form WordPress plugin through 1.0 suffers from an arbitrary file upload issue in page where a Form from the plugin is embed, as any file can be uploaded.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02207 Published 2021-04-12 No fix listed CWE-434
Open these records in search →