WordPress Plugin Vulnerabilities

WordPress File Upload < 2.7.1 - JS File Upload

Description

The WordPress File Upload WordPress plugin was affected by a JS File Upload security vulnerability.

Affects Plugins

Plugin icon
wp-file-upload
Fixed in 2.7.1

References

CVE
CVE-2015-9339

Miscellaneous

Verified
No
WPVDB ID
2f4c4af5-1778-4db0-90dc-7523b9ff97ed

Timeline

Publicly Published
2015-05-09 (about 10 years ago)
Added
2019-08-23 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2023-12-27
Title
Rencontre – Dating Site < 3.11 - Unauthenticated Arbitrary File Upload
Published
2012-06-05
Title
Member Private Conversation < 1.4 - Unrestricted File Upload
Published
2023-12-05
Title
Symbiostock Lite <= 6.0.0 - Authenticated (Shop Manager+) Arbitrary File Upload
Published
2015-04-12
Title
N-Media Website Contact Form with File Upload < 1.4 - Arbitrary File Upload
Published
2021-06-28
Title
SP Project & Document Manager < 4.24 - Subscriber+ Shell Upload