WordPress plugin
File Upload Types by WPForms security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 1 known vulnerability is fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium1
- Low0
All File Upload Types by WPForms vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.4 | Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload ≤1.4.0Update to 1.5.0 | CVE-2024-10016 |
- Medium6.4Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
≤1.4.0Update to 1.5.0
File Upload Types by WPForms: common questions
Does File Upload Types by WPForms have known vulnerabilities?
Yes. VulnCrest Radar lists 1 known vulnerability in File Upload Types by WPForms: 1 medium. None are known to affect version null.
How do I check which version of File Upload Types by WPForms I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent File Upload Types by WPForms vulnerability?
CVE-2024-10016, published Oct 24, 2024: File Upload Types by WPForms <= 1.4.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload. Severity: Medium (CVSS 6.4).
Is any File Upload Types by WPForms vulnerability listed in CISA KEV?
No. None of the known File Upload Types by WPForms vulnerabilities is currently listed in the CISA KEV catalog.