upcasted

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

upcasted records in CISA KEV

No upcasted vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-70379 CVE-2026-62035 · GHSA-5g33-v9wf-46c9

Broken access control in AWS S3 for WordPress Plugin, Upcasted

LOW 28

Subscriber Broken Access Control in AWS S3 for WordPress Plugin – Upcasted <= 3.1.0 versions.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00249 Published 2026-10-10 No fix listed CWE-862

TI-2025-16558 CVE-2025-22676 · GHSA-wxgr-6vq6-62hp

WordPress Upcasted S3 Offload plugin <= 3.0.3 - Cross Site Scripting (XSS) vulnerability

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in upcasted AWS S3 for WordPress Plugin – Upcasted upcasted-s3-offload allows Stored XSS.This issue affects AWS S3 for Wo…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00227 Published 2025-02-16 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0