Iptanus: >> Wordpress File Upload >> 1.2 Security Vulnerabilities
The wp-file-upload plugin before 2.7.1 for WordPress has insufficient restrictions on upload of .js files.
CVSS Score
7.5
EPSS Score
0.003
Published
2019-08-22
The wp-file-upload plugin before 3.0.0 for WordPress has insufficient restrictions on upload of php, js, pht, php3, php4, php5, phtml, htm, html, and htaccess files.
CVSS Score
7.5
EPSS Score
0.003
Published
2019-08-22
The wp-file-upload plugin before 3.4.1 for WordPress has insufficient restrictions on upload of .php.js files.
CVSS Score
7.5
EPSS Score
0.003
Published
2019-08-22
The Iptanus WordPress File Upload plugin before 4.3.4 for WordPress mishandles Settings attributes, leading to XSS.
CVSS Score
6.1
EPSS Score
0.05
Published
2018-04-07
The Iptanus WordPress File Upload plugin before 4.3.3 for WordPress mishandles shortcode attributes.
CVSS Score
5.4
EPSS Score
0.025
Published
2018-04-01
Page 3