IF
Product
Iptanus File Upload
by nickboss · last CVE Feb 25, 2025
11
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 1Medium 7Low 0
Watch

Add Iptanus File Upload to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-11635
9.8
1%
Jan 8
WordPress File Upload <= 4.24.12 - Unuathenticated Remote Code Execution
Affected: through 4.24.12
CVE-2024-11613
9.8
4%
Jan 8
WordPress File Upload <= 4.24.15 - Unauthenticated Remote Code Execution, Arbitrary File Read, and Arbitrary File Deletion
Affected: through 4.24.15
CVE-2024-9047
9.8
93%
Oct 12
WordPress File Upload <= 4.24.11 - Unauthenticated Path Traversal to Arbitrary File Read and Deletion in wfu_file_downloader.php
Affected: through 4.24.11
CVE-2024-9939
7.5
1%
Jan 8
WordPress File Upload <= 4.24.13 - Unauthenticated Path Traversal to Arbitrary File Read in wfu_file_downloader.php
Affected: through 4.24.13
CVE-2024-7301
6.1
0%
Aug 16
WordPress File Upload <= 4.24.8 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload
Affected: through 4.24.8
CVE-2023-2767
5.5
0%
Jun 9
WordPress File Upload / WordPress File Upload Pro <= 4.19.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Affected: through 4.19.1
CVE-2024-2847
5.4
0%
Apr 9
WordPress File Upload <= 4.24.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Affected: through 4.24.5
CVE-2023-2688
4.9
2%
Jun 9
WordPress File Upload / WordPress File Upload Pro <= 4.19.1 - Authenticated (Administrator+) Path Traversal
Affected: through 4.19.1
CVE-2024-13494
4.3
0%
Feb 25
WordPress File Upload <= 4.25.2 - Cross-Site Request Forgery in wfu_file_details
Affected: through 4.25.2
CVE-2024-12719
4.3
0%
Jan 7
WordPress File Upload <= 4.24.15 - Missing Authorization to Authenticated (Subscriber+) Limited Path Traversal
Affected: through 4.24.15
CVE-2024-5852
4.3
1%
Jul 16
WordPress File Upload <= 4.24.7 - Authenticated (Contributor+) Directory Traversal
Affected: through 4.24.7
Showing 11