Iptanus Wordpress File Upload vulnerabilities

• iptanus wordpress file upload, nickboss iptanus file upload +1 more WordPress File Upload <= 4.25.2 - Cross-Site Request Forgery in wfu_file_details CVE-2024-13494 4.3 MediumFebruary 25, 2025
• iptanus wordpress file upload, nickboss iptanus file upload +1 more WordPress File Upload <= 4.24.13 - Unauthenticated Path Traversal to Arbitrary File Read in wfu_file_downloader.php CVE-2024-9939 7.5 HighJanuary 8, 2025
• iptanus wordpress file upload, nickboss iptanus file upload +1 more WordPress File Upload <= 4.24.12 - Unuathenticated Remote Code Execution CVE-2024-11635 Public exploit 9.8 CriticalJanuary 8, 2025
• iptanus wordpress file upload, nickboss iptanus file upload +1 more WordPress File Upload <= 4.24.15 - Unauthenticated Remote Code Execution, Arbitrary File Read, and Arbitrary File Deletion CVE-2024-11613 Public exploit 9.8 CriticalJanuary 8, 2025
• iptanus wordpress file upload, nickboss iptanus file upload +1 more WordPress File Upload <= 4.24.15 - Missing Authorization to Authenticated (Subscriber+) Limited Path Traversal CVE-2024-12719 4.3 MediumJanuary 7, 2025
• iptanus wordpress file upload WordPress File Upload plugin <= 4.24.7 - Broken Access Control + CSRF vulnerability CVE-2024-39639 4.3 MediumNovember 1, 2024
• iptanus wordpress file upload, nickboss iptanus file upload +1 more WordPress File Upload <= 4.24.11 - Unauthenticated Path Traversal to Arbitrary File Read and Deletion in wfu_file_downloader.php CVE-2024-9047 Public exploit EPSS 93.3% 9.8 CriticalOctober 12, 2024
• iptanus wordpress file upload, nickboss iptanus file upload +1 more WordPress File Upload <= 4.24.8 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload CVE-2024-7301 7.2 HighAugust 16, 2024
• iptanus wordpress file upload, wordpress file upload project file upload +1 more WordPress File Upload < 4.24.8 - Unauthenticated Stored XSS CVE-2024-6494 6.1 MediumAugust 7, 2024
• iptanus wordpress file upload, wordpress file upload project file upload +1 more WordPress File Upload < 4.24.8 - Reflected XSS CVE-2024-6651 Public exploit EPSS 15.7% 6.1 MediumAugust 6, 2024
• iptanus wordpress file upload, nickboss iptanus file upload +1 more WordPress File Upload <= 4.24.7 - Authenticated (Contributor+) Directory Traversal CVE-2024-5852 4.3 MediumJuly 16, 2024
• iptanus wordpress file upload, nickboss iptanus file upload +1 more WordPress File Upload <= 4.24.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2024-2847 6.4 MediumApril 9, 2024
• iptanus wordpress file upload WordPress File Upload < 4.23.3 - Author+ Stored Cross-Site Scripting CVE-2023-4811 5.4 MediumOctober 16, 2023
• iptanus wordpress file upload, wordpress file upload pro, nickboss iptanus file upload +2 more WordPress File Upload / WordPress File Upload Pro <= 4.19.1 - Authenticated (Administrator+) Path Traversal CVE-2023-2688 4.9 MediumJune 9, 2023
• iptanus wordpress file upload, wordpress file upload pro, nickboss iptanus file upload +2 more WordPress File Upload / WordPress File Upload Pro <= 4.19.1 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-2767 4.4 MediumJune 9, 2023
• iptanus wordpress file upload, wordpress file upload pro +1 more WordPress File Upload < 4.16.3 - Contributor+ Path Traversal to RCE CVE-2021-24962 8.8 HighMarch 28, 2022
• iptanus wordpress file upload, unknown wordpress-file-upload-pro, iptanus wordpress file upload pro +2 more WordPress File Upload < 4.16.3 - Contributor+ Stored Cross-Site Scripting via Shortcode CVE-2021-24961 5.4 MediumMarch 7, 2022
• iptanus wordpress file upload, unknown wordpress-file-upload-pro, iptanus wordpress file upload pro +2 more WordPress File Upload < 4.16.3 - Contributor+ Stored Cross-Site Scripting via Malicious SVG CVE-2021-24960 5.4 MediumMarch 7, 2022
• iptanus wordpress file upload An issue was discovered in the File Upload plugin before 4.13.0 for WordPress. A directory... CVE-2020-10564 9.8 CriticalMarch 13, 2020
• iptanus wordpress file upload The wp-file-upload plugin before 2.5.0 for WordPress has insufficient restrictions on upload of ... CVE-2015-9338 7.5 HighAugust 22, 2019
• iptanus wordpress file upload The wp-file-upload plugin before 2.7.1 for WordPress has insufficient restrictions on upload of ... CVE-2015-9339 7.5 HighAugust 22, 2019
• iptanus wordpress file upload The wp-file-upload plugin before 3.0.0 for WordPress has insufficient restrictions on upload of... CVE-2015-9340 7.5 HighAugust 22, 2019
• iptanus wordpress file upload The wp-file-upload plugin before 3.4.1 for WordPress has insufficient restrictions on upload of ... CVE-2015-9341 7.5 HighAugust 22, 2019
• iptanus wordpress file upload The Iptanus WordPress File Upload plugin before 4.3.4 for WordPress mishandles Settings... CVE-2018-9844 Public exploit 6.1 MediumApril 7, 2018
• iptanus wordpress file upload The Iptanus WordPress File Upload plugin before 4.3.3 for WordPress mishandles shortcode attributes. CVE-2018-9172 Public exploit 5.4 MediumApril 1, 2018