Approved changes feed: RSS · Atom

cpe:2.3:a:scriptonite:user_files:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorScriptonite (50bda5d4-2e80-58ab-8d86-7f497404348c)
ProductUser Files (eb11edd1-b281-54d8-ae6b-06b3120bf934)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-23953 vulnerable 2026-06-08 07:12:47.211780 WordPress user files plugin <= 2.4.2 - Arbitrary File Upload vulnerability
CRITICAL (10)
Unrestricted Upload of File with Dangerous Type vulnerability in Scriptonite user files user-files allows Upload a Web Shell to a Web Server.This issue affects user files: from n/a through <= 2.4.2.
Published: 2025-01-22T14:29:24.868Z
Updated: 2026-05-11T23:03:10.492Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.