Wp Upload Restriction
Approved changes feed: RSS · Atom
cpe:2.3:a:wp_upload_restriction:wp_upload_restriction:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Wp Upload Restriction (c557cd41-f830-5c15-bfc2-6cc6528c53b2) |
|---|---|
| Product | Wp Upload Restriction (b7d1d020-3e1d-52b3-a372-93a4e03610ab) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-34627 |
vulnerable | 2026-06-08 05:32:14.309903 |
WP Upload Restriction <= 2.2.3 - Missing Access Control in getSelectedMimeTypesByRole function
MEDIUM (4.3)
A vulnerability in the getSelectedMimeTypesByRole function of the WP Upload Restriction WordPress plugin allows low-level authenticated users to view custom extensions added by administrators. This issue affects versions 2.2.3 and prior.
Published: 2021-07-07T12:21:32.490Z
Updated: 2024-09-16T18:54:22.361Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-34626 |
vulnerable | 2026-06-08 05:32:14.309541 |
WP Upload Restriction <= 2.2.3 - Missing Access Control in deleteCustomType function
MEDIUM (4.3)
A vulnerability in the deleteCustomType function of the WP Upload Restriction WordPress plugin allows low-level authenticated users to delete custom extensions added by administrators. This issue affects versions 2.2.3 and prior.
Published: 2021-07-07T12:21:27.113Z
Updated: 2024-09-16T16:58:03.185Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-34625 |
vulnerable | 2026-06-08 05:32:14.308571 |
WP Upload Restriction <= 2.2.3 - Authenticated Stored Cross-Site Scripting
MEDIUM (6.4)
A vulnerability in the saveCustomType function of the WP Upload Restriction WordPress plugin allows low-level authenticated users to inject arbitrary web scripts. This issue affects versions 2.2.3 and prior.
Published: 2021-07-07T12:21:38.493Z
Updated: 2024-09-16T18:56:07.715Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.