Read the docs

Plupload

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Plupload records in CISA KEV

No Plupload vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Plupload 1 record LOW

Records

1 record in Plupload · all components

TI-2016-03931 CVE-2016-4566 · GHSA-cv88-x229-26m4

Cross-site scripting (XSS) vulnerability in plupload.flash.swf in Plupload before 2.1.9…

Priority LOW 36

Cross-site scripting (XSS) vulnerability in plupload.flash.swf in Plupload before 2.1.9, as used in WordPress before 4.5.2, allows remote attackers to inject arbitrary web script or HTML via a Same-Origin Method Executio…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.05995 Published 2016-05-22 No fix listed CWE-79
Open these records in search →