TI-2011-04643 CVE-2011-10041 · GHSA-vf5j-jhr7-6gmgUploadify <= 1.0 Unauthenticated Arbitrary File UploadPriority HIGH 81Uploadify WordPress plugin versions up to and including 1.0 contain an arbitrary file upload vulnerability in process_upload.php due to missing file type validation.CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00813 · Published 2026-01-15 · No fix listed CWE-434