Medium severity4.3NVD Advisory· Published Jul 7, 2021· Updated Jun 17, 2026
CVE-2021-34627
CVE-2021-34627
Description
A vulnerability in the getSelectedMimeTypesByRole function of the WP Upload Restriction WordPress plugin allows low-level authenticated users to view custom extensions added by administrators. This issue affects versions 2.2.3 and prior.
Affected products
2- Range: <=2.2.3
- WP Upload Restriction/WP Upload Restrictionv5Range: 2.2.3
Patches
Vulnerability mechanics
References
1- www.wordfence.com/vulnerability-advisories/nvdThird Party Advisory
News mentions
0No linked articles in our index yet.