cleantalk
Vulnerabilities and Security Researches

WordPress File Upload, CVE-2015-9340

CVE, Research URL

CVE-2015-9340

Application

WordPress File Upload

Published on
Aug 23, 2019
Research Description
The wp-file-upload plugin before 3.0.0 for WordPress has insufficient restrictions on upload of php, js, pht, php3, php4, php5, phtml, htm, html, and htaccess files.
Affected versions
Min -, max 3.0.0.
Status
vulnerable