WordPress plugin
WP Upload Restriction security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 3 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium3
- Low0
All WP Upload Restriction vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.4 | WP Upload Restriction <= 2.2.4 – Authenticated (Subscriber+) Stored Cross-Site Scripting ≤2.2.4Update to 2.2.5 | CVE-2021-34625 | |
| Medium4.3 | Missing Authorization Checks ≤2.2.4Update to 2.2.5 | CVE-2021-34626 | |
| Medium4.3 | Missing Authorization Checks ≤2.2.4Update to 2.2.5 | CVE-2021-34627 |
- Medium6.4WP Upload Restriction <= 2.2.4 – Authenticated (Subscriber+) Stored Cross-Site Scripting
≤2.2.4Update to 2.2.5
- Medium4.3Missing Authorization Checks
≤2.2.4Update to 2.2.5
- Medium4.3Missing Authorization Checks
≤2.2.4Update to 2.2.5
WP Upload Restriction: common questions
Does WP Upload Restriction have known vulnerabilities?
Yes. VulnCrest Radar lists 3 known vulnerabilities in WP Upload Restriction: 3 medium. None are known to affect version null.
How do I check which version of WP Upload Restriction I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent WP Upload Restriction vulnerability?
CVE-2021-34625, published Jul 7, 2021: WP Upload Restriction <= 2.2.4 – Authenticated (Subscriber+) Stored Cross-Site Scripting. Severity: Medium (CVSS 6.4).
Is any WP Upload Restriction vulnerability listed in CISA KEV?
No. None of the known WP Upload Restriction vulnerabilities is currently listed in the CISA KEV catalog.