Swiss Toolkit For Wp
Approved changes feed: RSS · Atom
cpe:2.3:a:wpmessiah:swiss_toolkit_for_wp:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Wpmessiah (4409c14e-8411-5d7a-9044-2eb37ae1c84e) |
|---|---|
| Product | Swiss Toolkit For Wp (4fedb765-e21c-5d3b-99c1-f22389602d2d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-2354 |
vulnerable | 2026-07-29 00:37:44.682864 |
Swiss Toolkit For WP <= 1.4.6 - Authenticated (Author+) Arbitrary File Upload via upload_extension_files()
HIGH (8.8)
The Swiss Toolkit For WP plugin for WordPress is vulnerable to arbitrary file upload due to a flawed file type validation bypass in the `upload_extension_files()` function in all versions up to, and including, 1.4.6. The `upload_extension_files()` function hooks into WordPress's `wp_check_filetype_and_ext` filter and uses `strpos()` to check if a filename contains a configured extension string, rather than verifying the actual file extension. This makes it possible for authenticated attackers, with Author-level access and above, to upload arbitrary files (including PHP) on the affected site's server which may make remote code execution possible, granted the "Enhanced Multi-Format Image Support" feature is enabled with at least one extension (e.g., avif) in the allowed formats.
Published: 2026-07-11T03:44:21.070Z
Updated: 2026-07-13T14:39:51.179Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-5204 |
vulnerable | 2026-06-08 06:56:15.150695 |
Swiss Toolkit For WP <= 1.0.7 - Authenticated (Contributor+) Authentication Bypass
HIGH (8.8)
The Swiss Toolkit For WP plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.0.7. This is due to the plugin storing custom data in post metadata without an underscore prefix. This makes it possible for authenticated attackers with contributor-level and above permissions to log in as any existing user on the site, such as an administrator.
Published: 2024-05-29T02:00:35.975Z
Updated: 2026-04-08T17:13:51.659Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.