CWE-434Vulnerability type
WordPress Arbitrary File Upload vulnerabilities (page 1295)
Upload handlers that accept PHP files, the shortest route from a plugin bug to a webshell.
The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.
- Critical9.6Cross-Site Request Forgery to Cross-Site Scripting via Comments
WordPress
≤5.1Update to 3.7.29 or 3.8.29 or 3.9.27 or 4.0.26 or 4.1.26 or 4.2.23 or 4.3.19 or 4.4.18 or 4.5.17 or 4.6.14 or 4.7.13 or 4.8.9 or 4.9.10 or 5.0.4 or 5.1.1
- Critical9.8Unauthenticated Arbitrary Options Update
Visual CSS Style Editor
<7.2.1Update to 7.2.1
- High8.1File Uploads <= 3.0.22 - Unauthenticated Arbitrary File Upload
Ninja Forms - File Uploads
<3.0.23Update to 3.0.23
- High7.2Missing Authorization to Stored Cross-Site Scripting
YUZO
<5.12.94Update to 5.12.94
- Medium6.1Referer Cross-Site Scripting
WP Statistics – Simple, privacy-friendly Google Analytics alternative
≤12.6.3Update to 12.6.4
- High7.3Missing Authorization and No Direct File Access Restrictions
ARI Adminer – WordPress Database Manager
≤1.1.14Update to 1.1.15
- High8.8Remote Code Execution
Groundhogg — CRM, Newsletters, and Marketing Automation
<1.3.5Update to 1.3.5
- High8.1Cross-Site Request Forgery to Local File Inclusion
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder
≤1.13.4Update to 1.13.5
- High8.8Cross-Site Request Forgery
Contact Form by WD – responsive drag & drop contact form builder tool
<1.13.5Update to 1.13.5
- High8.8Cross-Site Request Forgery
Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin
<2.0.40Update to 2.0.40
- High7.5Denial of Service
article2pdf
≤0.27No patch available
- Medium4.3Insufficient Restrictions on Option Changes
Easy Updates Manager
≤8.0.4Update to 8.0.5
- Critical9.10.27 - Information Disclosure
article2pdf
≤0.27No patch available
- High7.2VulnCrest analysisKEVPoCUnauthenticated Arbitrary Settings Update
Social Sharing Plugin – Social Warfare
<3.5.3Update to 3.5.3
- Medium6.1Reflected Cross-Site Scripting
Font Organizer
≤2.1.1No patch available
- High7.5Sensitive Information Disclosure
WP Human Resource Management
<2.2.6Update to 2.2.6
- Critical9.8Missing Authorization to Arbitrary Options Update
Easy WP SMTP – WordPress SMTP and Email Logs: Gmail SMTP, Office 365, Outlook, Custom SMTP, and more
<1.3.9.1Update to 1.3.9.1
- Medium6.1Cross-Site Scripting
Import and export users and customers
<1.14.0.3Update to 1.14.0.3
- Critical9.8Missing Authorization
Speed Optimizer – The All-In-One Performance-Boosting Plugin
<5.0.13Update to 5.0.13
- High8.8Cross-Site Request Forgery
Import and export users and customers
<1.14.0.3Update to 1.14.0.3
- Critical9.8Local File Inclusion
GraceMedia Media Player
≤1.0No patch available
- Medium6.1Stored Cross-Site Scripting
WooCommerce Subscription
<2.6.3Update to 2.6.3
- Critical9.8Remote Code Execution via unrestricted file upload
wp-live-chat-support-pro
≤8.0.06Update to 8.0.07
- High7.2Stored Cross-Site Scripting
Abandoned Cart Lite for WooCommerce
<5.2.0Update to 5.2.0
- Medium6.1Cross-Site Scripting
Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker
≤6.2.1Update to 6.2.2
- Medium6.1Cross-Site Scripting via tribe_paged Parameter
The Events Calendar
<4.8.2Update to 4.8.2
- High8.8Cross-Site Request Forgery
Smart Forms – when you need more than just a contact form
<2.6.26Update to 2.6.26
- High8.8Cross-Site Request Forgery
FormCraft – Form Builder
≤1.2.1Update to 1.2.2
- High8.8Cross-Site Request Forgery
FormCraft – Form Builder
<1.2.2Update to 1.2.2
- High7.5Authorization Bypass
WP Human Resource Management
<2.2.6Update to 2.2.6