work_the_flow_file_upload vulnerabilities

CVEs whose affected-version data names the work_the_flow_file_upload package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2015-10138Critical· 9.8PoC

1y ago

The Work The Flow File Upload plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the jQuery-File-Upload-9.5.0 server and test files in versions up to, and including, 2.5.2

The Work The Flow File Upload plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the jQuery-File-Upload-9.5.0 server and test files in versions up to, and including, 2.5.2. This makes it p…

▾ Abyssallyntonreed · work_the_flow_file_uploadEPSS 3.6%via NVD