Description

WordPress Plugin WordPress File Upload is prone to multiple unspecified vulnerabilities. No available information exists regarding these issues and their impact on a vulnerable website. WordPress Plugin WordPress File Upload version 3.10.0 is vulnerable; prior versions may also be affected.

Remediation

Update to plugin version 3.11.0 or latest

References

https://plugins.svn.wordpress.org/wp-file-upload/trunk/readme.txt

Related Vulnerabilities

WordPress Plugin MasterStudy LMS-for Online Courses and Education Security Bypass (3.3.8)

WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-5714)

TYPO3 Cryptographic Issues Vulnerability (CVE-2012-3527)

WordPress Plugin Widget for Facebook Page Feeds Cross-Site Scripting (5.0)

WebLogic CVE-2017-10137 Vulnerability (CVE-2017-10137)

Severity

High

Tags

Missing Update Unauthenticated File Upload