Vulnerabilities > Advancedcustomfields > ACF Fronted Display > 1.0.4

DATE CVE VULNERABILITY TITLE RISK
2019-10-10 CVE-2015-9479 Unrestricted Upload of File with Dangerous Type vulnerability in Advancedcustomfields ACF Fronted Display
The ACF-Frontend-Display plugin through 2015-07-03 for WordPress has arbitrary file upload via an action=upload request to js/blueimp-jQuery-File-Upload-d45deb1/server/php/index.php.
network
low complexity
advancedcustomfields CWE-434
7.5