NI
Vendor
nickboss
13
CVEs
0
On KEV
1
New 30D
Products
WF9.3
WordPress File Upload
nickboss
2 CVEs0 on KEV1 new
IF9.8
Iptanus File Upload
nickboss
11 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-62071 | WF WordPress File Upload nickboss | 9.3 | Oct 1 | WordPress WordPress File Upload plugin <= 5.1.10 - SQL Injection vulnerability |
| CVE-2026-66447 | WF WordPress File Upload nickboss | 9.3 | Aug 6 | WordPress WordPress File Upload plugin <= 5.1.7 - SQL Injection vulnerability |
| CVE-2024-13494 | IF Iptanus File Upload nickboss | 4.3 | Feb 25 | WordPress File Upload <= 4.25.2 - Cross-Site Request Forgery in wfu_file_details |
| CVE-2024-9939 | IF Iptanus File Upload nickboss | 7.5 | Jan 8 | WordPress File Upload <= 4.24.13 - Unauthenticated Path Traversal to Arbitrary File Read in wfu_file_downloader.php |
| CVE-2024-11635 | IF Iptanus File Upload nickboss | 9.8 | Jan 8 | WordPress File Upload <= 4.24.12 - Unuathenticated Remote Code Execution |
| CVE-2024-11613 | IF Iptanus File Upload nickboss | 9.8 | Jan 8 | WordPress File Upload <= 4.24.15 - Unauthenticated Remote Code Execution, Arbitrary File Read, and Arbitrary File Deletion |
| CVE-2024-12719 | IF Iptanus File Upload nickboss | 4.3 | Jan 7 | WordPress File Upload <= 4.24.15 - Missing Authorization to Authenticated (Subscriber+) Limited Path Traversal |
| CVE-2024-9047 | IF Iptanus File Upload nickboss | 9.8 | Oct 12 | WordPress File Upload <= 4.24.11 - Unauthenticated Path Traversal to Arbitrary File Read and Deletion in wfu_file_downloader.php |
| CVE-2024-7301 | IF Iptanus File Upload nickboss | 6.1 | Aug 16 | WordPress File Upload <= 4.24.8 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload |
| CVE-2024-5852 | IF Iptanus File Upload nickboss | 4.3 | Jul 16 | WordPress File Upload <= 4.24.7 - Authenticated (Contributor+) Directory Traversal |
| CVE-2024-2847 | IF Iptanus File Upload nickboss | 5.4 | Apr 9 | WordPress File Upload <= 4.24.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode |
| CVE-2023-2688 | IF Iptanus File Upload nickboss | 4.9 | Jun 9 | WordPress File Upload / WordPress File Upload Pro <= 4.19.1 - Authenticated (Administrator+) Path Traversal |
| CVE-2023-2767 | IF Iptanus File Upload nickboss | 5.5 | Jun 9 | WordPress File Upload / WordPress File Upload Pro <= 4.19.1 - Authenticated (Administrator+) Stored Cross-Site Scripting |
