Vulnerabilities > Extendify > Editorskit > 1.31.7

DATE CVE VULNERABILITY TITLE RISK
2024-02-05 CVE-2023-6635 Unrestricted Upload of File with Dangerous Type vulnerability in Extendify Editorskit
The EditorsKit plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation on the 'import_styles' function in versions up to, and including, 1.40.3.
network
low complexity
extendify CWE-434
7.2