What’s Vulnerable › Products

nickboss Iptanus File Upload vulnerabilities

27 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.

Check whether your nickboss Iptanus File Upload version is affected

Latest nickboss Iptanus File Upload vulnerabilities

• CVE-2026-62071 — WordPress WordPress File Upload plugin <= 5.1.10 - SQL Injection vulnerability (CVSS 9.3)
• CVE-2026-66447 — WordPress WordPress File Upload plugin <= 5.1.7 - SQL Injection vulnerability (CVSS 9.3)
• CVE-2024-13494 — WordPress File Upload <= 4.25.2 - Cross-Site Request Forgery in wfu_file_details (CVSS 4.3)
• CVE-2024-9939 — WordPress File Upload <= 4.24.13 - Unauthenticated Path Traversal to Arbitrary File Read in wfu_file_downloader.php (CVSS 7.5)
• CVE-2024-11635 — WordPress File Upload <= 4.24.12 - Unuathenticated Remote Code Execution (CVSS 9.8)
• CVE-2024-11613 — WordPress File Upload <= 4.24.15 - Unauthenticated Remote Code Execution, Arbitrary File Read, and Arbitrary File Deletion (CVSS 9.8)
• CVE-2024-12719 — WordPress File Upload <= 4.24.15 - Missing Authorization to Authenticated (Subscriber+) Limited Path Traversal (CVSS 4.3)
• CVE-2024-39639 — WordPress File Upload plugin <= 4.24.7 - Broken Access Control + CSRF vulnerability (CVSS 3.5)
• CVE-2024-9047 — WordPress File Upload <= 4.24.11 - Unauthenticated Path Traversal to Arbitrary File Read and Deletion in wfu_file_downloader.php (CVSS 9.8)
• CVE-2024-7301 — WordPress File Upload <= 4.24.8 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload (CVSS 6.1)
• CVE-2024-6494 — WordPress File Upload < 4.24.8 - Unauthenticated Stored XSS (CVSS 6.1)
• CVE-2024-6651 — WordPress File Upload < 4.24.8 - Reflected XSS (CVSS 6.1)
• CVE-2024-5852 — WordPress File Upload <= 4.24.7 - Authenticated (Contributor+) Directory Traversal (CVSS 4.3)
• CVE-2024-2847 — WordPress File Upload <= 4.24.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 5.4)
• CVE-2023-4811 — WordPress File Upload < 4.23.3 - Author+ Stored Cross-Site Scripting (CVSS 5.4)
• CVE-2023-2767 — WordPress File Upload / WordPress File Upload Pro <= 4.19.1 - Authenticated (Administrator+) Stored Cross-Site Scripting (CVSS 5.5)
• CVE-2023-2688 — WordPress File Upload / WordPress File Upload Pro <= 4.19.1 - Authenticated (Administrator+) Path Traversal (CVSS 4.9)
• CVE-2021-24962 — WordPress File Upload < 4.16.3 - Contributor+ Path Traversal to RCE (CVSS 8.8)
• CVE-2021-24961 — WordPress File Upload < 4.16.3 - Contributor+ Stored Cross-Site Scripting via Shortcode (CVSS 5.4)
• CVE-2021-24960 — WordPress File Upload < 4.16.3 - Contributor+ Stored Cross-Site Scripting via Malicious SVG (CVSS 5.4)
• CVE-2020-10564 — (CVSS 9.8)
• CVE-2015-9340 — (CVSS 7.5)
• CVE-2015-9339 — (CVSS 7.5)
• CVE-2015-9338 — (CVSS 7.5)
• CVE-2015-9341 — (CVSS 7.5)