WF
Product
Wordpress File Upload
by Iptanus · last CVE Feb 25, 2025
25
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 6Medium 14Low 1
Watch

Add Wordpress File Upload to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-24962
8.8
3%
Mar 28
WordPress File Upload < 4.16.3 - Contributor+ Path Traversal to RCE
Affected: before 4.16.3
CVE-2024-9939
7.5
1%
Jan 8
WordPress File Upload <= 4.24.13 - Unauthenticated Path Traversal to Arbitrary File Read in wfu_file_downloader.php
Affected: before 4.24.14
CVE-2015-9340
7.5
1%
Aug 22
The wp-file-upload plugin before 3.0.0 for WordPress has insufficient restrictions on upload of php, js, pht, php3, php4, php5, phtml, htm, html, and htaccess files
Affected: before 3.0.0
CVE-2015-9339
7.5
1%
Aug 22
The wp-file-upload plugin before 2.7.1 for WordPress has insufficient restrictions on upload of .js files
Affected: before 2.7.1
CVE-2015-9338
7.5
1%
Aug 22
The wp-file-upload plugin before 2.5.0 for WordPress has insufficient restrictions on upload of .php files
Affected: before 2.5.0
CVE-2015-9341
7.5
1%
Aug 22
The wp-file-upload plugin before 3.4.1 for WordPress has insufficient restrictions on upload of .php.js files
Affected: before 3.4.1
Showing 6