CVE-2015-9339: Malicious File Upload
Published Aug 22, 2019
·Updated
The wp-file-upload plugin before 2.7.1 for WordPress has insufficient restrictions on upload of .js files.
Affected Software
1 affected component
Iptanus Wordpress File Upload Wordpress<2.7.1
Event History
Aug 22, 2019
CVE Published
via MITRE·07:02 PM
Data Sourced
via MITRE·07:02 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for the wp-file-upload plugin?
The vulnerability ID for the wp-file-upload plugin is CVE-2015-9339.
2
What is the severity of CVE-2015-9339?
The severity of CVE-2015-9339 is high with a severity value of 7.5.
3
What is the affected software for CVE-2015-9339?
The affected software for CVE-2015-9339 is the wp-file-upload plugin before version 2.7.1 for WordPress.
4
What are the restrictions on upload of .js files in the wp-file-upload plugin?
The wp-file-upload plugin before 2.7.1 for WordPress has insufficient restrictions on upload of .js files.
5
Where can I find more information about the wp-file-upload plugin?
You can find more information about the wp-file-upload plugin on the WordPress plugin directory.
6
What is the CWE ID for CVE-2015-9339?
The CWE ID for CVE-2015-9339 is 434.