Skip to content
OpenAdvisories

Vendor

jurredeklijn

2 known vulnerabilities.

Products

Wux Blog Editor 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2024-9932 Public exploit EPSS 38%

    Wux Blog Editor <= 3.0.0 - Unauthenticated Arbitrary File Upload

    The Wux Blog Editor plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'wuxbt_insertImageNew' function in versions up to, and including, 3.0.0. This makes it possible for unauthenticated attackers to u…

    jurredeklijn Wux Blog Editor Web / CMS