nickboss vulnerabilities

CVEs per yearBy the year they were published

1. 20232
2. 20244
3. 20255
4. 20263

Newest CVEs

• CVE-2026-66570

  WordPress WordPress File Upload plugin <= 5.2.1 - Cross Site Scripting (XSS) vulnerability

  Nickboss · WordPress File Upload

  High7.1
• CVE-2026-62071

  WordPress WordPress File Upload plugin <= 5.1.10 - SQL Injection vulnerability

  nickboss · WordPress File Upload

  Critical9.3
• CVE-2026-66447

  WordPress WordPress File Upload plugin <= 5.1.7 - SQL Injection vulnerability

  nickboss · WordPress File Upload

  Critical9.3
• CVE-2024-13494

  WordPress File Upload <= 4.25.2 - Cross-Site Request Forgery in wfu_file_details

  nickboss · Iptanus File Upload

  Medium4.3
• CVE-2024-9939

  WordPress File Upload <= 4.24.13 - Unauthenticated Path Traversal to Arbitrary File Read in wfu_file_downloader.php

  nickboss · Iptanus File Upload

  High7.5
• CVE-2024-11635

  WordPress File Upload <= 4.24.12 - Unuathenticated Remote Code Execution

  nickboss · Iptanus File Upload

  Critical9.8
• CVE-2024-11613

  WordPress File Upload <= 4.24.15 - Unauthenticated Remote Code Execution, Arbitrary File Read, and Arbitrary File Deletion

  nickboss · Iptanus File Upload

  Critical9.8
• CVE-2024-12719

  WordPress File Upload <= 4.24.15 - Missing Authorization to Authenticated (Subscriber+) Limited Path Traversal

  nickboss · Iptanus File Upload

  Medium4.3
• CVE-2024-9047

  WordPress File Upload <= 4.24.11 - Unauthenticated Path Traversal to Arbitrary File Read and Deletion in wfu_file_downloader.php

  nickboss · Iptanus File Upload

  Critical9.8
• CVE-2024-7301

  WordPress File Upload <= 4.24.8 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload

  nickboss · Iptanus File Upload

  High7.2