WordPress Plugin Vulnerabilities

WordPress File Upload < 2.5.0 - PHP File Upload

Description

The WordPress File Upload WordPress plugin was affected by a PHP File Upload security vulnerability.

Affects Plugins

Plugin icon
wp-file-upload
Fixed in 2.5.0

References

CVE
CVE-2015-9338

Miscellaneous

Verified
No
WPVDB ID
9b749a25-f3ab-4b92-a212-f3747a5306b0

Timeline

Publicly Published
2015-01-23 (about 11 years ago)
Added
2019-08-23 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2022-11-21
Title
Motors - Car Dealer, Classifieds & Listing < 1.4.4 - Arbitrary File Upload
Published
2026-02-18
Title
Checkout Field Manager (Checkout Manager) for WooCommerce < 7.8.2 - Unauthenticated Limited File Upload
Published
2024-05-28
Title
WP STAGING WordPress Backup Plugin – Migration Backup Restore < 3.5.0 - Admin+ Arbitrary File Upload
Published
2014-08-01
Title
Picturesurf Gallery 1.2 - upload.php Arbitrary File Upload
Published
2026-01-15
Title
Supreme Modules Lite < 2.5.63 - Author+ Arbitrary File Upload via JSON Upload Bypass