CWE-434Vulnerability type
WordPress Arbitrary File Upload vulnerabilities (page 1317)
Upload handlers that accept PHP files, the shortest route from a plugin bug to a webshell.
The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.
| Severity | Vulnerability | CVE | Installs | Published |
|---|---|---|---|---|
| High7.2 | Authenticated (Admin+) SQL Injection | CVE-2016-10943 | — | |
| High8.8 | Cross-Site Request Forgery to Stored Cross-Site Scripting | CVE-2016-11085 | — | |
| High8.8 | SQL Injection | CVE-2016-10942 | — | |
| Medium6.1 | Reflected Cross-Site Scripting | CVE-2016-10871 | — | |
| Critical9.8 | Arbitrary File Upload | CVE-2016-15033 | — | |
| Medium6.1 | Reflected Cross-Site Scripting | CVE-2016-10736 | — | |
| High8.8 | Cross-Site Request Forgery | CVE-2016-10944 | — | |
| High8.3 | Server Side Request Forgery | CVE-2016-10926 | — | |
| Medium5.5 | Authenticated Stored Cross-Site Scripting | CVE-2016-10112 | — | |
| Medium6.1 | Cross-Site Scripting | CVE-2017-2243 | — | |
| Medium5.3 | Local File Inclusion | CVE-2016-20064 | — | |
| Critical9.8 | SQL Injection | CVE-2016-20065 | — | |
| High8.8 | Cross-Site Request Forgery | CVE-2016-10945 | — | |
| Critical9.8 | Arbitrary File Upload | CVE-2015-1000013 | — | |
| Critical9.8 | SQL Injection | CVE-2016-10904 | — | |
| Medium6.1 | Reflected Cross-Site Scripting | CVE-2017-1000033 | — | |
| High8.8 | Cross-Site Request Forgery | CVE-2016-10946 | — | |
| High8.8 | SQL Injection | CVE-2016-10949 | — | |
| High8.1 | PHP Object Injection | CVE-2016-10948 | — | |
| High7.2 | Authenticated (Super Admin+) SQL Injection | CVE-2016-10947 | — | |
| Critical9.8 | SQL Injection | CVE-2016-20072 | — | |
| High7.5 | Remote File Inclusion | CVE-2016-6565 | 300K+ | |
| Critical9.8 | Authenticated Local File Inclusion & SQL injection | CVE-2016-10889 | 300K+ | |
| Medium6.1 | Reflected Cross-Site Scripting | CVE-2016-10934 | — | |
| Medium6.1 | Reflected Cross-Site Scripting | CVE-2016-10866 | — | |
| Critical9.8 | SQL Injection | CVE-2016-20073 | — | |
| High7.2 | SQL Injection | CVE-2016-10951 | — | |
| High8.8 | SQL Injection | CVE-2016-10950 | — | |
| Medium6.1 | Cross-Site Scripting | CVE-2016-10952 | — | |
| Medium6.1 | Cross-Site Scripting | CVE-2016-10919 | — |
- High7.2Authenticated (Admin+) SQL Injection
ZX_CSV Upload
≤1No patch available
- High8.8Cross-Site Request Forgery to Stored Cross-Site Scripting
Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker
<4.7.9Update to 4.7.9
- High8.8SQL Injection
Podlove Podcast Publisher
<2.3.16Update to 2.3.16
- Medium6.1Reflected Cross-Site Scripting
MC4WP: Mailchimp for WordPress
<4.0.11Update to 4.0.11
- Critical9.8Arbitrary File Upload
Delete All Comments
≤2.0No patch available
- Medium6.1Reflected Cross-Site Scripting
Hubbub Lite – Fast, free social sharing and follow buttons
≤1.2.5Update to 1.2.6
- High8.8Cross-Site Request Forgery
Multisite Post Duplicator
≤1.7.6No patch available
- High8.3Server Side Request Forgery
Nelio A/B Testing – AB Tests and Heatmaps for Better Conversion Optimization
≤4.5.8Update to 4.5.9
- Medium5.5Authenticated Stored Cross-Site Scripting
WooCommerce
<2.6.9Update to 2.6.9
- Medium6.1Cross-Site Scripting
Responsive Lightbox & Gallery
≤1.7.1Update to 1.7.2
- Medium5.3Local File Inclusion
WP Vault
≤0.8.6.6No patch available
- Critical9.8SQL Injection
product-catalog-8
≤1.2.0No patch available
- High8.8Cross-Site Request Forgery
Platform
≤1.1.4No patch available
- Critical9.8Arbitrary File Upload
Csv2WPeC Coupon
≤1.1No patch available
- Critical9.8SQL Injection
Olimometer
<2.57Update to 2.57
- Medium6.1Reflected Cross-Site Scripting
Vospari Forms
<1.4Update to 1.4
- High8.8Cross-Site Request Forgery
Wp-D3
<2.4.1Update to 2.4.1
- High8.8SQL Injection
Relevanssi Premium
<1.14.6.1Update to 1.14.6.1
- High8.1PHP Object Injection
Post Indexer
<3.0.6.2Update to 3.0.6.2
- High7.2Authenticated (Super Admin+) SQL Injection
Post Indexer
<3.0.6.2Update to 3.0.6.2
- Critical9.8SQL Injection
BBS e-Franchise
<1.1.4Update to 1.1.4
- High7.5Remote File Inclusion
Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery
≤2.1.56Update to 2.1.57
- Critical9.8Authenticated Local File Inclusion & SQL injection
Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery
≤2.1.56Update to 2.1.57
- Medium6.1Reflected Cross-Site Scripting
Check & Log Email – Easy Email Testing & Mail logging
<0.5.2Update to 0.5.2
- Medium6.1Reflected Cross-Site Scripting
All-In-One Security (AIOS) – Security and Firewall
<4.2.0Update to 4.2.0
- Critical9.8SQL Injection
Answer My Question
≤1.3No patch available
- High7.2SQL Injection
FireStorm Shopping Cart eCommerce Plugin
≤2.07.02No patch available
- High8.8SQL Injection
Image Optimizer, Resizer and CDN – Sirv
<1.3.2Update to 1.3.2
- Medium6.1Cross-Site Scripting
Quotes Collection
<2.0.6Update to 2.0.6
- Medium6.1Cross-Site Scripting
WassUp Real Time Analytics
<1.9.1Update to 1.9.1