WordPress security by component

getSelectedMimeTypesByRole function of the WP Upload Restriction

Plugin description

getSelectedMimeTypesByRole function of the WP Upload Restriction is a WordPress component with 3 published CVE records in this archive. The latest tracked vulnerability was published Jul 07, 2021; the highest CVE/CNA score is 6.4.

Plugin slug: wp-upload-restriction

Latest vulnerability

CVE-2021-34627: getSelectedMimeTypesByRole function of the WP Upload Restriction: A security weakness

getSelectedMimeTypesByRole function of the WP Upload Restriction is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.

PublishedJul 07, 2021

Safe version guidanceSee mitigation notes

		Safe version
Jul 07, 2021	CVE-2021-34627 getSelectedMimeTypesByRole function of the WP Upload Restriction: A security weakness getSelectedMimeTypesByRole function of the WP Upload Restriction is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.	See mitigation notes	CVE4.3 NVD4.3
Jul 07, 2021	CVE-2021-34626 deleteCustomType function of the WP Upload Restriction: A security weakness deleteCustomType function of the WP Upload Restriction is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.	See mitigation notes	CVE4.3 NVD4.3
Jul 07, 2021	CVE-2021-34625 saveCustomType function of the WP Upload Restriction: A security weakness saveCustomType function of the WP Upload Restriction is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.	See mitigation notes	CVE6.4 NVD5.4