Skip to content
OpenAdvisories

Vendor

lynton_reed

1 known vulnerabilities.

Products

Work The Flow File Upload 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2015-10138 Public exploit

    Work The Flow File Upload <= 2.5.2 - Arbitrary File Upload

    The Work The Flow File Upload plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the jQuery-File-Upload-9.5.0 server and test files in versions up to, and including, 2.5.2. This makes it possible for unauthenti…

    lynton_reed Work The Flow File Upload Web / CMS