WordPress Plugin Vulnerabilities

Cimy User Extra Fields - Arbitrary File Upload

Description

The Cimy User Extra Fields WordPress plugin was affected by an Arbitrary File Upload security vulnerability.

Affects Plugins

Plugin icon
cimy-user-extra-fields
Fixed in 2.3.9

Miscellaneous

Verified
No
WPVDB ID
cdaef822-e2d6-4206-a47b-e4d880549b7f

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2015-05-15 (about 10 years ago)

Other

Published
Title
Published
2021-05-13
Title
External Media < 1.0.34 - Authenticated Arbitrary File Upload
Published
2023-12-27
Title
TerraClassifieds <= 2.0.3 Unauthenticated Arbitrary File Upload
Published
2024-03-26
Title
Product Import Export for WooCommerce < 2.4.2 - Authenticated(Shop Manager+) Arbitrary File Upload
Published
2026-03-17
Title
Embed HTML5 Game <= 1.3 - Unauthenticated Arbitrary File Upload
Published
2014-12-11
Title
WP Symposium <= 14.11 - Unauthenticated Shell Upload