CVE-2021-34627

Publication date

2021-07-07 12:21:32

Family

Wordfence

State

PUBLISHED

Description

A vulnerability in the getSelectedMimeTypesByRole function of the WP Upload Restriction WordPress plugin allows low-level authenticated users to view custom extensions added by administrators. This issue affects versions 2.2.3 and prior.