WordPress Plugin Vulnerabilities

Work The Flow File Upload < 2.4 - wp-admin/admin-ajax.php accept_file_types Parameter Manipulation File Upload Restriction Bypass

Description

See https://github.com/wpscanteam/wpscan/issues/673#issuecomment-53972233

Affects Plugins

Plugin icon
work-the-flow-file-upload
Fixed in 2.4

References

URL
https://packetstormsecurity.com/files/#126333/

Miscellaneous

Verified
Yes
WPVDB ID
ebd698d3-c2a2-4c70-9153-06a8e7aaa2dc

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2024-09-12
Title
MStore API – Create Native Android & iOS Apps On The Cloud < 4.15.4 - Authenticated (Subscriber+) Limited Arbitrary File Upload
Published
2021-09-01
Title
Secure File Manager <= 2.9.3 - Admin+ RCE
Published
2024-10-21
Title
Custom Icons for Elementor < 0.3.4 - Authenticated (Admin+) Arbitrary File Upload
Published
2014-08-01
Title
grapefile <= 1.1 - Arbitrary File Upload
Published
2024-07-08
Title
Bit Form < 2.13.4 - Authenticated (Administrator+) Arbitrary File Upload