Wp Upload Restriction
Approved changes feed: RSS · Atom
cpe:2.3:a:wp-upload-restriction_project:wp-upload-restriction:*:*:*:*:*:wordpress:*:*part: a version: * update: *
| Vendor | Wp Upload Restriction Project (f5d6e4a7-f0ab-5214-be0a-0ec5fd174677) |
|---|---|
| Product | Wp Upload Restriction (a7d0ee6f-8e31-5448-85d2-8f6a5a4cf6cc) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-34627 |
vulnerable | 2026-06-08 05:32:14.309935 |
WP Upload Restriction <= 2.2.3 - Missing Access Control in getSelectedMimeTypesByRole function
MEDIUM (4.3)
A vulnerability in the getSelectedMimeTypesByRole function of the WP Upload Restriction WordPress plugin allows low-level authenticated users to view custom extensions added by administrators. This issue affects versions 2.2.3 and prior.
Published: 2021-07-07T12:21:32.490Z
Updated: 2024-09-16T18:54:22.361Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-34626 |
vulnerable | 2026-06-08 05:32:14.309579 |
WP Upload Restriction <= 2.2.3 - Missing Access Control in deleteCustomType function
MEDIUM (4.3)
A vulnerability in the deleteCustomType function of the WP Upload Restriction WordPress plugin allows low-level authenticated users to delete custom extensions added by administrators. This issue affects versions 2.2.3 and prior.
Published: 2021-07-07T12:21:27.113Z
Updated: 2024-09-16T16:58:03.185Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-34625 |
vulnerable | 2026-06-08 05:32:14.309127 |
WP Upload Restriction <= 2.2.3 - Authenticated Stored Cross-Site Scripting
MEDIUM (6.4)
A vulnerability in the saveCustomType function of the WP Upload Restriction WordPress plugin allows low-level authenticated users to inject arbitrary web scripts. This issue affects versions 2.2.3 and prior.
Published: 2021-07-07T12:21:38.493Z
Updated: 2024-09-16T18:56:07.715Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.