Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
WordPress Plugin WordPress File Upload Multiple Unspecified Vulnerabilities (3.10.0) - Vulnerability Database

WordPress Plugin WordPress File Upload Multiple Unspecified Vulnerabilities (3.10.0)

Description

WordPress Plugin WordPress File Upload is prone to multiple unspecified vulnerabilities. No available information exists regarding these issues and their impact on a vulnerable website. WordPress Plugin WordPress File Upload version 3.10.0 is vulnerable; prior versions may also be affected.

Remediation

Update to plugin version 3.11.0 or latest

References

https://plugins.svn.wordpress.org/wp-file-upload/trunk/readme.txt

Related Vulnerabilities

WordPress Plugin CopySafe PDF Protection Arbitrary File Upload (0.6) High
Common tags: Missing Update Unauthenticated File Upload
WordPress Plugin Homepage SlideShow 'upload.php' Arbitrary File Upload (2.0) High
Common tags: Missing Update Unauthenticated File Upload
WordPress Plugin Katalyst TimThumb 'timthumb.php' Arbitrary File Upload (1.0) High
Common tags: Missing Update Unauthenticated File Upload
WordPress Plugin Invit0r 'ofc_upload_image.php' Arbitrary File Upload (0.22) High
Common tags: Missing Update Unauthenticated File Upload
WordPress Plugin Advanced Custom Fields (ACF) Arbitrary File Upload (5.12.2) High
Common tags: Missing Update Unauthenticated File Upload

Severity

High

Tags

Missing Update
Unauthenticated File Upload