Medium severity6.4NVD Advisory· Published Jul 7, 2021· Updated Jun 17, 2026
CVE-2021-34625
CVE-2021-34625
Description
A vulnerability in the saveCustomType function of the WP Upload Restriction WordPress plugin allows low-level authenticated users to inject arbitrary web scripts. This issue affects versions 2.2.3 and prior.
Affected products
2- Range: <=2.2.3
- WP Upload Restriction/WP Upload Restrictionv5Range: 2.2.3
Patches
Vulnerability mechanics
References
1- www.wordfence.com/vulnerability-advisories/nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.