Read the docs

Wordpress File Upload Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Wordpress File Upload Project records in CISA KEV

No Wordpress File Upload Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wordpress File Upload 1 record LOW

Records

1 record in Wordpress File Upload · all components

TI-2014-04248 CVE-2014-5199 · GHSA-ggqv-fw9g-j8vp

Cross-site request forgery (CSRF) vulnerability in the WordPress File Upload plugin…

Priority LOW 32

Cross-site request forgery (CSRF) vulnerability in the WordPress File Upload plugin (wp-file-upload) before 2.4.2 for WordPress allows remote attackers to hijack the authentication of administrators for requests that cha…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.0097 Published 2014-08-12 No fix listed CWE-352
Open these records in search →