NetSight
high7.5

CVE-2015-9341

The wp-file-upload plugin before 3.4.1 for WordPress has insufficient restrictions on upload of .php.js files.

Impact

The wp-file-upload plugin before 3.4.1 for WordPress has insufficient restrictions on upload of .php.js files.

Affected products

VendorProductAffected versions
IptanusWordpress File Upload
before 3.4.1

Weakness classification

References