Security
فارسی
All products

wp-file-upload

WordPress · Plugin
36 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Iptanus File Upload <= 5.2.2 - Unauthenticated Stored Cross-Site ScriptingCVE-2026-123460 wp-file-upload WordPress High Fix reported
Iptanus File Upload <= 5.2.1 - Unauthenticated Stored Cross-Site ScriptingCVE-2026-66570 wp-file-upload WordPress High Fix reported
Iptanus File Upload <= 5.1.10 - Unauthenticated SQL InjectionCVE-2026-62071 wp-file-upload WordPress High Fix reported
Iptanus File Upload <= 5.1.6 - Unauthenticated Race Condition to File OverwriteCVE-2025-15546 wp-file-upload WordPress Medium Fix reported
File Upload <= 5.1.7 - Unauthenticated SQL InjectionCVE-2026-17044 wp-file-upload WordPress High Fix reported
Iptanus File Upload <= 5.1.7 - Unauthenticated SQL InjectionCVE-2026-66447 wp-file-upload WordPress High Fix reported
WordPress File Upload <= 4.24.12 - Unuathenticated Remote Code ExecutionCVE-2024-11635 wp-file-upload WordPress Critical Fix reported
WordPress File Upload <= 4.24.13 - Unauthenticated Path Traversal to Arbitrary File Read in wfu_file_downloader.phpCVE-2024-9939 wp-file-upload WordPress High Fix reported
WordPress File Upload <= 4.24.15 - Unauthenticated Remote Code Execution, Arbitrary File Read, and Arbitrary File DeletionCVE-2024-11613 wp-file-upload WordPress Critical Fix reported
WordPress File Upload <= 4.25.2 - Cross-Site Request Forgery in wfu_file_detailsCVE-2024-13494 wp-file-upload WordPress Medium Fix reported
WordPress File Upload <= 4.24.15 - Missing Authorization to Authenticated (Subscriber+) Limited Path TraversalCVE-2024-12719 wp-file-upload WordPress Medium Fix reported
WordPress File Upload <= 4.24.11 - Unauthenticated Path Traversal to Arbitrary File Read and Deletion in wfu_file_downloader.phpCVE-2024-9047 wp-file-upload WordPress Critical Fix reported
WordPress File Upload <= 4.24.8 - Unauthenticated Stored Cross-Site Scripting via SVG File UploadCVE-2024-7301 wp-file-upload WordPress High Fix reported
WordPress File Upload <= 4.24.7 - Unauthenticated Stored Cross-Site ScriptingCVE-2024-6494 wp-file-upload WordPress High Fix reported
WordPress File Upload <= 4.24.7 - Reflected Cross-Site ScriptingCVE-2024-6651 wp-file-upload WordPress Medium Fix reported
WordPress File Upload <= 4.24.7 - Missing AuthorizationCVE-2024-39639 wp-file-upload WordPress Medium Fix reported
WordPress File Upload <= 4.24.7 - Authenticated (Contributor+) Directory TraversalCVE-2024-5852 wp-file-upload WordPress Medium Fix reported
WordPress File Upload <= 4.12.2 - Directory Traversal to Remote Code ExecutionCVE-2020-10564 wp-file-upload WordPress Critical Fix reported
WordPress File Upload <= 4.24.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2024-2847 wp-file-upload WordPress Medium Fix reported
WordPress File Upload <= 2.4.3 - Reflected Cross-Site ScriptingCVE-2014-125110 wp-file-upload WordPress Medium Fix reported