The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Plupload before 1.5.4, as used in wp-includes/js/plupload/ in WordPress before 3.3.2 and other products, enables scripting regardless of the domain from which the SWF content was loaded, which allows remote attackers to bypass the Same Origin Policy via crafted content.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade wordpress | Jul 30, 2024 | Apr 21, 2012 |
| Freebsd | — | Upgrade wordpress | Dec 10, 2025 | Apr 23, 2012 |
| Wordpress | — | Upgrade Wordpress to version 1.5.4Upgrade Wordpress to version 3.3.2 | May 16, 2017 | Apr 21, 2012 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub