WP Upload Restriction

Products

ProductCVEsExploitedLatest
WP Upload Restriction3–Jul 7, 2021

Exploited and recent CVEs

  • CVE-2021-34625 Medium 6.4 WP Upload Restriction <= 2.2.3 - Authenticated Stored Cross-Site Scripting 0.6%
  • CVE-2021-34627 Medium 4.3 WP Upload Restriction <= 2.2.3 - Missing Access Control in getSelectedMimeTypesByRole function 0.7%
  • CVE-2021-34626 Medium 4.3 WP Upload Restriction <= 2.2.3 - Missing Access Control in deleteCustomType function 0.7%