Skip to content
OpenAdvisories

Vendor

upcasted

2 known vulnerabilities.

Products

AWS S3 for WordPress Plugin – Upcasted 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-62035

    WordPress AWS S3 for WordPress Plugin – Upcasted plugin <= 3.1.0 - Broken Access Control vulnerability

    Subscriber Broken Access Control in AWS S3 for WordPress Plugin – Upcasted <= 3.1.0 versions.

    upcasted AWS S3 for WordPress Plugin – Upcasted Web / CMS
  • Medium 6.5
    CVE-2025-22676

    WordPress Upcasted S3 Offload plugin <= 3.0.3 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in upcasted AWS S3 for WordPress Plugin – Upcasted upcasted-s3-offload allows Stored XSS.This issue affects AWS S3 for WordPress Plugin – Upcasted: from n/a thr…

    upcasted AWS S3 for WordPress Plugin – Upcasted Web / CMS