CWE-434Vulnerability type
WordPress Arbitrary File Upload vulnerabilities (page 1284)
Upload handlers that accept PHP files, the shortest route from a plugin bug to a webshell.
The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.
| Severity | Vulnerability | CVE | Installs | Published |
|---|---|---|---|---|
| Medium6.1 | Reflected Cross-Site Scripting | CVE-2020-7104 | — | |
| Medium6.1 | Reflected Cross-Site Scripting | CVE-2021-24885 | — | |
| Medium6.1 | Reflected Cross Site Scripting issue on the [ld_profile] search field | CVE-2020-7108 | — | |
| Critical9.8 | Authentication Bypass | CVE-2020-8771 | — | |
| Critical9.8 | Authentication Bypass | CVE-2020-8772 | — | |
| Medium5.3 | Insecure Direct Object Reference | CVE-2020-6859 | — | |
| High8.8 | Cross-Site Request Forgery to Stored Cross-Site Scripting and Setting Changes | CVE-2020-6167 | — | |
| High8.8 | Cross-Site Request Forgery | CVE-2020-35135 | — | |
| Medium5.4 | Missing Authorization to Export Settings/Theme Change | CVE-2020-6166 | — | |
| Medium4.8 | Cross-Site Scripting via post_title | CVE-2019-20181 | — | |
| Medium6.1 | Reflected Cross-Site Scripting | CVE-2020-7107 | — | |
| High7.5 | Sensitive Information Disclosure | CVE-2020-5244 | — | |
| Medium5.3 | Post Submission Spoofing & Stored Cross-Site Scripting | CVE-2019-20203 | — | |
| Medium5.4 | Cross-Site Scripting | CVE-2019-20204 | — | |
| High7.6 | Authenticated Plugin Deactivation | CVE-2019-25149 | — | |
| Medium5.4 | Missing Authorization | CVE-2019-25143 | — | |
| Medium6.1 | Cross-Site Scripting | CVE-2019-20210 | — | |
| Medium6.5 | Authenticated Post Deleition via IDOR | CVE-2019-20209 | — | |
| High7.2 | Stored Cross-Site Scripting | CVE-2019-20212 | — | |
| High7.2 | Stored Cross-Site Scripting | CVE-2019-20211 | — | |
| Medium6.5 | Easy Redirect Manager <= 2.40 - Missing Authorization | CVE-2019-19915 | — | |
| High7.1 | Missing Authorization | CVE-2020-6168 | — | |
| Medium6.1 | Authenticated Cross-Site Scripting | CVE-2020-11731 | — | |
| High7.5 | Local File Inclusion | CVE-2020-11732 | — | |
| Critical9.8 | Remote Code Execution via tax_query, meta_query, date_query Parameters | CVE-2020-11928 | — | |
| Medium6.4 | Authenticated Stored Cross-Site Scripting WordPress≤5.3Update to 3.7.32 or 3.8.32 or 3.9.30 or 4.0.29 or 4.1.29 or 4.2.26 or 4.3.22 or 4.4.21 or 4.5.20 or 4.6.17 or 4.7.16 or 4.8.12 or 4.9.13 or 5.0.8 or 5.1.4 or 5.2.5 or 5.3.1 | CVE-2019-20041 | — | |
| Medium5.8 | Authenticated Stored Cross-Site Scripting WordPress≤5.2.4Update to 3.7.32 or 3.8.32 or 3.9.30 or 4.0.29 or 4.1.29 or 4.2.26 or 4.3.22 or 4.4.21 or 4.5.20 or 4.6.17 or 4.7.16 or 4.8.12 or 4.9.13 or 5.0.8 or 5.1.4 or 5.2.5 or 5.3.1 | CVE-2019-16781 | — | |
| Medium6.4 | Authenticated Stored Cross-Site Scripting WordPress≤5.3Update to 3.7.32 or 3.8.32 or 3.9.30 or 4.0.29 or 4.1.29 or 4.2.26 or 4.3.22 or 4.4.21 or 4.5.20 or 4.6.17 or 4.7.16 or 4.8.12 or 4.9.13 or 5.0.8 or 5.1.4 or 5.2.5 or 5.3.1 | CVE-2019-20042 | — | |
| Medium5.8 | Stored Cross-Site Scripting via Block Editor WordPress≤5.3Update to 3.7.32 or 3.8.32 or 3.9.30 or 4.0.29 or 4.1.29 or 4.2.26 or 4.3.22 or 4.4.21 or 4.5.20 or 4.6.17 or 4.7.16 or 4.8.12 or 4.9.13 or 5.0.8 or 5.1.4 or 5.2.5 or 5.3.1 | CVE-2019-16780 | — | |
| High8.8 | Cross-Site Request Forgery | CVE-2019-6030 | — |
- Medium6.1Reflected Cross-Site Scripting
Chained Quiz
<1.1.8.2Update to 1.1.8.2
- Medium6.1Reflected Cross-Site Scripting
YOP Poll
<6.1.2Update to 6.1.2
- Medium6.1Reflected Cross Site Scripting issue on the [ld_profile] search field
LearnDash LMS
3.0.0 – 3.1.1Update to 3.1.2
- Critical9.8Authentication Bypass
Backup and Staging by WP Time Capsule
<1.21.16Update to 1.21.16
- Critical9.8Authentication Bypass
InfiniteWP Client
≤1.9.4.4Update to 1.9.4.5
- Medium5.3Insecure Direct Object Reference
Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin
<2.1.3Update to 2.1.3
- High8.8Cross-Site Request Forgery to Stored Cross-Site Scripting and Setting Changes
Minimal Coming Soon – Coming Soon Page
≤2.10Update to 2.15
- High8.8Cross-Site Request Forgery
Ultimate Category Excluder
≤1.1Update to 1.2
- Medium5.4Missing Authorization to Export Settings/Theme Change
Minimal Coming Soon – Coming Soon Page
<2.17Update to 2.17
- Medium4.8Cross-Site Scripting via post_title
Awesome Support – WordPress HelpDesk & Support Plugin
≤6.0.13Update to 6.0.14
- Medium6.1Reflected Cross-Site Scripting
Ultimate FAQ Accordion Plugin
≤1.8.29Update to 1.8.30
- High7.5Sensitive Information Disclosure
BuddyPress
≤5.1.1Update to 5.1.2
- Medium5.3Post Submission Spoofing & Stored Cross-Site Scripting
Postie
<1.9.41Update to 1.9.41
- Medium5.4Cross-Site Scripting
Postie
<1.9.41Update to 1.9.41
- High7.6Authenticated Plugin Deactivation
Gallery Images Ape
<2.0.7Update to 2.0.7
- Medium5.4Missing Authorization
GDPR Cookie Compliance – Cookie Banner, Cookie Consent, Cookie Notice for CCPA, EU Cookie Law
≤4.0.2Update to 4.0.3
- Medium6.1Cross-Site Scripting
EasyBook – Hotel & Tour Booking WordPress Theme
<1.2.2Update to 1.2.2
- Medium6.5Authenticated Post Deleition via IDOR
EasyBook – Hotel & Tour Booking WordPress Theme
<1.2.2Update to 1.2.2
- High7.2Stored Cross-Site Scripting
EasyBook – Hotel & Tour Booking WordPress Theme
≤1.2.1Update to 1.2.2
- High7.2Stored Cross-Site Scripting
EasyBook – Hotel & Tour Booking WordPress Theme
≤1.2.1Update to 1.2.2
- Medium6.5Easy Redirect Manager <= 2.40 - Missing Authorization
301 Redirects – Redirect Manager
≤2.40Update to 2.45
- High7.1Missing Authorization
Minimal Coming Soon – Coming Soon Page
<2.15Update to 2.15
- Medium6.1Authenticated Cross-Site Scripting
Media Library Assistant
<2.82Update to 2.82
- High7.5Local File Inclusion
Media Library Assistant
≤2.81Update to 2.82
- Critical9.8Remote Code Execution via tax_query, meta_query, date_query Parameters
Media Library Assistant
≤2.81Update to 2.82
- Medium6.4Authenticated Stored Cross-Site Scripting
WordPress
≤5.3Update to 3.7.32 or 3.8.32 or 3.9.30 or 4.0.29 or 4.1.29 or 4.2.26 or 4.3.22 or 4.4.21 or 4.5.20 or 4.6.17 or 4.7.16 or 4.8.12 or 4.9.13 or 5.0.8 or 5.1.4 or 5.2.5 or 5.3.1
- Medium5.8Authenticated Stored Cross-Site Scripting
WordPress
≤5.2.4Update to 3.7.32 or 3.8.32 or 3.9.30 or 4.0.29 or 4.1.29 or 4.2.26 or 4.3.22 or 4.4.21 or 4.5.20 or 4.6.17 or 4.7.16 or 4.8.12 or 4.9.13 or 5.0.8 or 5.1.4 or 5.2.5 or 5.3.1
- Medium6.4Authenticated Stored Cross-Site Scripting
WordPress
≤5.3Update to 3.7.32 or 3.8.32 or 3.9.30 or 4.0.29 or 4.1.29 or 4.2.26 or 4.3.22 or 4.4.21 or 4.5.20 or 4.6.17 or 4.7.16 or 4.8.12 or 4.9.13 or 5.0.8 or 5.1.4 or 5.2.5 or 5.3.1
- Medium5.8Stored Cross-Site Scripting via Block Editor
WordPress
≤5.3Update to 3.7.32 or 3.8.32 or 3.9.30 or 4.0.29 or 4.1.29 or 4.2.26 or 4.3.22 or 4.4.21 or 4.5.20 or 4.6.17 or 4.7.16 or 4.8.12 or 4.9.13 or 5.0.8 or 5.1.4 or 5.2.5 or 5.3.1
- High8.8Cross-Site Request Forgery
Custom Body Class
≤0.6.0Update to 0.7.0