Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: WordPress File Upload, wordpress-file-upload-pro 4.16.3 Clear all filters
TI-2021-07240 CVE-2021-24961 · GHSA-v8xx-gxhg-qqpr

WordPress File Upload < 4.16.3 - Contributor+ Stored Cross-Site Scripting via Shortcode

Priority LOW 26

The WordPress File Upload WordPress plugin before 4.16.3, wordpress-file-upload-pro WordPress plugin before 4.16.3 does not escape some of its shortcode argument, which could allow users with a role as low as Contributor…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00674 Published 2022-03-07 Fixed in 4.16.3 CWE-79
TI-2021-07239 CVE-2021-24960 · GHSA-g533-q4qm-q7jp

WordPress File Upload < 4.16.3 - Contributor+ Stored Cross-Site Scripting via Malicious SVG

Priority LOW 26

The WordPress File Upload WordPress plugin before 4.16.3, wordpress-file-upload-pro WordPress plugin before 4.16.3 allows users with a role as low as Contributor to configure the upload form in a way that allows uploadin…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00674 Published 2022-03-07 Fixed in 4.16.3 CWE-434