CVE-2015-9341: Malicious File Upload
Published Aug 22, 2019
·Updated
The wp-file-upload plugin before 3.4.1 for WordPress has insufficient restrictions on upload of .php.js files.
Affected Software
1 affected component
Iptanus Wordpress File Upload Wordpress<3.4.1
Event History
Aug 22, 2019
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2015-9341.
2
What is the title of the vulnerability?
The title of the vulnerability is 'The wp-file-upload plugin before 3.4.1 for WordPress has insufficient restrictions on upload of .php.js files.'
3
What is the affected software?
The affected software is the wp-file-upload plugin before version 3.4.1 for WordPress.
4
What is the severity of CVE-2015-9341?
The severity of CVE-2015-9341 is high with a severity value of 7.5.
5
How do I fix CVE-2015-9341?
To fix CVE-2015-9341, update the wp-file-upload plugin to version 3.4.1 or higher.