GCVE - cpe:2.3:a:wp_extra_file_types_project:wp_extra_file

Approved changes feed: RSS · Atom

cpe:2.3:a:wp_extra_file_types_project:wp_extra_file_types:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

Vendor	Wp Extra File Types Project (`4edc2e13-afc0-5513-bb30-0dc910cfff75`)
Product	Wp Extra File Types (`4c516ee1-0a4b-50e8-80d0-322c0c98ba1a`)
Edition	*
Language	*
Software edition	*
Target software	wordpress
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-24936`	vulnerable	2026-06-08 05:30:39.652941	WP Extra File Types < 0.5.1 - CSRF to Stored Cross-Site Scripting The WP Extra File Types WordPress plugin before 0.5.1 does not have CSRF check when saving its settings, nor sanitise and escape some of them, which could allow attackers to make a logged in admin change them and perform Cross-Site Scripting attacks Published: 2022-01-24T08:00:56.000Z Updated: 2024-08-03T19:49:13.407Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/4fb61b84-ff5f-4b4c-a516-54b749f9611e	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.