Wp-upload-restriction Project Wp-upload-restriction — known CVE vulnerabilities
Every CVE whose affected-product data names Wp-upload-restriction Project Wp-upload-restriction, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (3)
CVE-2021-34625 — CVSS 6.4 (medium): A vulnerability in the saveCustomType function of the WP Upload Restriction WordPress plugin allows low-level authenticated users to inject…
CVE-2021-34626 — CVSS 4.3 (medium): A vulnerability in the deleteCustomType function of the WP Upload Restriction WordPress plugin allows low-level authenticated users to…
CVE-2021-34627 — CVSS 4.3 (medium): A vulnerability in the getSelectedMimeTypesByRole function of the WP Upload Restriction WordPress plugin allows low-level authenticated…