Read the docs

Wp Extra File Types Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Wp Extra File Types Project records in CISA KEV

No Wp Extra File Types Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wp Extra File Types 1 record LOW

Records

1 record

TI-2021-07215 CVE-2021-24936 · GHSA-29ch-3cxc-63fh

WP Extra File Types < 0.5.1 - CSRF to Stored Cross-Site Scripting

Priority LOW 36

The WP Extra File Types WordPress plugin before 0.5.1 does not have CSRF check when saving its settings, nor sanitise and escape some of them, which could allow attackers to make a logged in admin change them and perform…

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00541 Published 2022-01-24 Fixed in 0.5.1 CWE-352
Open these records in search →