The Iptanus WordPress File Upload plugin before 4.3.4 for WordPress mishandles Settings attributes, leading to XSS.
Search vulnerabilities
CVE-2018-9844
CVSS 3.0 · 6.1 Medium
EPSS 3.6%
KEV · Not listed
Vendors
Products
CVE-2018-9172
The Iptanus WordPress File Upload plugin before 4.3.3 for WordPress mishandles shortcode attributes.
CVSS 3.0 · 5.4 Medium
EPSS 3.1%
KEV · Not listed
Vendors
Products
CVE-2015-9341
The wp-file-upload plugin before 3.4.1 for WordPress has insufficient restrictions on upload of .php.js files.
CVSS 3.0 · 7.5 High
EPSS 1.4%
KEV · Not listed
Vendors
Products
CVE-2015-9340
The wp-file-upload plugin before 3.0.0 for WordPress has insufficient restrictions on upload of php, js, pht, php3, php4, php5, phtml, htm, html, and htaccess files.
CVSS 3.0 · 7.5 High
EPSS 1.4%
KEV · Not listed
Vendors
Products
CVE-2015-9339
The wp-file-upload plugin before 2.7.1 for WordPress has insufficient restrictions on upload of .js files.
CVSS 3.0 · 7.5 High
EPSS 1.4%
KEV · Not listed
Vendors
Products
CVE-2015-9338
The wp-file-upload plugin before 2.5.0 for WordPress has insufficient restrictions on upload of .php files.
CVSS 3.0 · 7.5 High
EPSS 1.4%
KEV · Not listed
Vendors
Products