plugin

N5 Uploadform Vulnerabilities

2 known security issues reported for the N5 Uploadform WordPress plugin. Most recent disclosed Apr 12, 2021.

1 critical

Running N5 Uploadform on your site? Check whether your installed version is affected.

Scan your site free

N5 Upload Form [n5-uploadform] <= 1.0 (unfixed + closed)

unknown

[en] The N5 Upload Form WordPress plugin through 1.0 suffers from an arbitrary file upload issue in page where a Form from the plugin is embed, as any file can be uploaded. The uploaded filename might be hard to guess as it's generated with md5(uniqid(rand())), however, in the case of misconfigured servers with Directo...

Affected:
up to 1.0
Fix:
No patched version reported
Disclosed:
Apr 12, 2021

CVE-2021-24223 on NVD →

N5 Upload Form <= 1.0 - Arbitrary File Upload

critical

The N5 Upload Form WordPress plugin through 1.0 suffers from an arbitrary file upload issue in page where a Form from the plugin is embed, as any file can be uploaded. The uploaded filename might be hard to guess as it's generated with md5(uniqid(rand())), however, in the case of misconfigured servers with Directory li...

CVSS:
9.8
Affected:
up to 1.0
Fix:
No patched version reported
Disclosed:
Mar 26, 2021

CVE-2021-24223 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database