N5 Upload Form [n5-uploadform] <= 1.0 (unfixed + closed)
unknown
[en] The N5 Upload Form WordPress plugin through 1.0 suffers from an arbitrary file upload issue in page where a Form from the plugin is embed, as any file can be uploaded. The uploaded filename might be hard to guess as it's generated with md5(uniqid(rand())), however, in the case of misconfigured servers with Directo...
- Affected:
- up to 1.0
- Fix:
- No patched version reported
- Disclosed:
- Apr 12, 2021
CVE-2021-24223 on NVD →
N5 Upload Form <= 1.0 - Arbitrary File Upload
critical
The N5 Upload Form WordPress plugin through 1.0 suffers from an arbitrary file upload issue in page where a Form from the plugin is embed, as any file can be uploaded. The uploaded filename might be hard to guess as it's generated with md5(uniqid(rand())), however, in the case of misconfigured servers with Directory li...
- CVSS:
- 9.8
- Affected:
- up to 1.0
- Fix:
- No patched version reported
- Disclosed:
- Mar 26, 2021
CVE-2021-24223 on NVD →
Protect your WordPress site
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free
← Back to the vulnerability database