CVE-2015-10138 | Work the Flow File Upload Plugin up to 2.5.2 on WordPress jQuery-File-Upload-9.5.0 unrestricted upload

July 19, 2025 Yanac

A vulnerability has been found in Work the Flow File Upload Plugin up to 2.5.2 on WordPress and classified as critical. This vulnerability affects unknown code of the component jQuery-File-Upload-9.5.0. The manipulation leads to unrestricted upload.

This vulnerability was named CVE-2015-10138. The attack can be initiated remotely. There is no exploit available.VulDB Recent EntriesRead More