WordPress Plugin Vulnerabilities

WordPress File Upload <= 4.3.2 - Security Issue in Shortcodes

Description

The WordPress File Upload WordPress plugin was affected by a Security Issue in Shortcodes security vulnerability.

Affects Plugins

Plugin icon
wp-file-upload
Fixed in 4.3.3

References

CVE
CVE-2018-9172
URL
https://www.iptanus.com/new-version-4-3-3-of-wordpress-file-upload-plugin/

Miscellaneous

Submitter
Ryan
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
fef50aa7-47f0-40d5-9c31-e17d4cccbbd1

Timeline

Publicly Published
2018-04-01 (about 8 years ago)
Added
2018-04-03 (about 8 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2017-03-01
Title
VaultPress <= 1.8.6 - Backend Server SSL Verification Disabled
Published
2018-12-03
Title
PropertyHive <= 1.4.25 - Unvalidated Input to do_action()
Published
2014-08-01
Title
Frontier Post - Publishing Posts Security Bypass
Published
2023-11-28
Title
WP Forms Puzzle Captcha <= 4.1 - Captcha Bypass
Published
2023-09-25
Title
Staff / Employee Business Directory for Active Directory < 1.3 - Admin LDAP Credentials Retrieval