WordPress Plugin Vulnerabilities

WordPress File Upload < 3.9.0 - Insufficient File Extension Blacklisting

Description

The WordPress File Upload WordPress plugin was affected by an Insufficient File Extension Blacklisting security vulnerability.

Affects Plugins

Plugin icon
wp-file-upload
Fixed in 3.9.0

References

URL
https://wordpress.org/plugins/wp-file-upload/#developers
URL
https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=1442639%40wp-file-upload&old=1430990%40wp-file-upload&sfp_email=&sfph_mail=

Miscellaneous

Submitter
Bini Shala
Submitter twitter
binishala
Verified
No
WPVDB ID
5bcf315a-3e61-4db3-bb38-b1f2f12c195a

Timeline

Publicly Published
2016-06-23 (about 7 years ago)
Added
2016-06-23 (about 7 years ago)
Last Updated
2019-11-01 (about 4 years ago)

Other

Published
Title
Published
2014-08-01
Title
Complete Gallery Manager 3.3.3 - Arbitrary File Upload
Published
2022-10-28
Title
Api2Cart Bridge Connector < 1.2.0 - Unauthenticated Arbitrary File Upload
Published
2022-03-28
Title
Tatsu < 3.3.12 - Unauthenticated RCE
Published
2014-08-01
Title
vithy - Arbitrary File Upload
Published
2014-08-01
Title
ReFlex Gallery 1.3 - Shell Upload