Export limit exceeded: 425865 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2021-34627

WP Upload Restriction <= 2.2.3 - Missing Access Control in getSelectedMimeTypesByRole function

A vulnerability in the getSelectedMimeTypesByRole function of the WP Upload Restriction WordPress plugin allows low-level authenticated users to view custom extensions added by administrators. This issue affects versions 2.2.3 and prior.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Wp-upload-restriction Project
Products
Wp-upload-restriction
CVE-2021-34626

WP Upload Restriction <= 2.2.3 - Missing Access Control in deleteCustomType function

A vulnerability in the deleteCustomType function of the WP Upload Restriction WordPress plugin allows low-level authenticated users to delete custom extensions added by administrators. This issue affects versions 2.2.3 and prior.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Wp-upload-restriction Project
Products
Wp-upload-restriction
CVE-2021-34625

WP Upload Restriction <= 2.2.3 - Authenticated Stored Cross-Site Scripting

A vulnerability in the saveCustomType function of the WP Upload Restriction WordPress plugin allows low-level authenticated users to inject arbitrary web scripts. This issue affects versions 2.2.3 and prior.

CVSS 3.1 · 6.4 Medium EPSS < 1% KEV · Not listed
Vendors
Wp-upload-restriction Project
Products
Wp-upload-restriction