Advisories · Technology

AWS S3 for WordPress Plugin – Upcasted.

Every CVE that names AWS S3 for WordPress Plugin – Upcasted among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-62035 CVE record

CVSS 6.3 Medium

WordPress AWS S3 for WordPress Plugin – Upcasted plugin <= 3.1.0 - Broken Access Control vulnerability
- AWS S3 for WordPress Plugin – Upcasted
- Broken access control
Not analysed yet 10 Oct 2026
CVE-2025-22676 CVE record

CVSS 6.5 Medium

WordPress Upcasted S3 Offload plugin <= 3.0.3 - Cross Site Scripting (XSS) vulnerability
- AWS S3 for WordPress Plugin – Upcasted
- Cross-site scripting (XSS)
Not analysed yet 16 Feb 2025