CVE-2012-2401

Plupload before 1.5.4, as used in wp-includes/js/plupload/ in WordPress before 3.3.2 and other products, enables scripting regardless of the domain from which…

published April 21, 2012

CVSS
—
EPSS
3%
Percentile
88.6
In the wild
Unconfirmed
What it is

Plupload before 1.5.4, as used in wp-includes/js/plupload/ in WordPress before 3.3.2 and other products, enables scripting regardless of the domain from which the SWF content was loaded, which allows remote attackers to bypass the Same Origin Policy via crafted content.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03379 · 88.6th percentile
Published
2012-04-21T23:00Z
EPSS history
Timeline
  • 21 APR 23:00Z
    Plupload before 1.5.4, as used in wp-includes/js/plupload/ in WordPress before 3.3.2 and other products, enables scripting regardless of the domain from which…
    cvelistv5