Swfupload Project Swfupload — known CVE vulnerabilities

Every CVE whose affected-product data names Swfupload Project Swfupload, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2013-4144 — CVSS 9.8 (critical): There is an object injection vulnerability in swfupload plugin for wordpress.
• CVE-2012-3414 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in swfupload.swf in SWFUpload 2.2.0.1 and earlier, as used in WordPress before 3.3.2, TinyMCE…