Nickboss vulnerabilities

Products

• Iptanus File Upload 13
• Wordpress File Upload 3

Newest

• nickboss wordpress file upload WordPress WordPress File Upload plugin <= 5.2.1 - Cross Site Scripting (XSS) vulnerability CVE-2026-66570 7.1 HighNovember 1, 2026
• nickboss wordpress file upload WordPress WordPress File Upload plugin <= 5.1.10 - SQL Injection vulnerability CVE-2026-62071 9.3 CriticalOctober 1, 2026
• nickboss iptanus file upload WordPress File Upload < 5.1.8 - Unauthenticated SQL Injection via uniqueuploadid CVE-2026-17044 8.6 HighAugust 9, 2026
• nickboss wordpress file upload WordPress WordPress File Upload plugin <= 5.1.7 - SQL Injection vulnerability CVE-2026-66447 9.3 CriticalAugust 6, 2026
• nickboss iptanus file upload Iptanus File Upload < 5.1.7 - File Overwrite via Race Condition CVE-2025-15546 5.4 MediumJune 14, 2026
• iptanus wordpress file upload, nickboss iptanus file upload +1 more WordPress File Upload <= 4.25.2 - Cross-Site Request Forgery in wfu_file_details CVE-2024-13494 4.3 MediumFebruary 25, 2025
• iptanus wordpress file upload, nickboss iptanus file upload +1 more WordPress File Upload <= 4.24.13 - Unauthenticated Path Traversal to Arbitrary File Read in wfu_file_downloader.php CVE-2024-9939 7.5 HighJanuary 8, 2025
• iptanus wordpress file upload, nickboss iptanus file upload +1 more WordPress File Upload <= 4.24.12 - Unuathenticated Remote Code Execution CVE-2024-11635 Public exploit 9.8 CriticalJanuary 8, 2025
• iptanus wordpress file upload, nickboss iptanus file upload +1 more WordPress File Upload <= 4.24.15 - Unauthenticated Remote Code Execution, Arbitrary File Read, and Arbitrary File Deletion CVE-2024-11613 Public exploit 9.8 CriticalJanuary 8, 2025
• iptanus wordpress file upload, nickboss iptanus file upload +1 more WordPress File Upload <= 4.24.15 - Missing Authorization to Authenticated (Subscriber+) Limited Path Traversal CVE-2024-12719 4.3 MediumJanuary 7, 2025
• iptanus wordpress file upload, nickboss iptanus file upload +1 more WordPress File Upload <= 4.24.11 - Unauthenticated Path Traversal to Arbitrary File Read and Deletion in wfu_file_downloader.php CVE-2024-9047 Public exploit EPSS 93.3% 9.8 CriticalOctober 12, 2024
• iptanus wordpress file upload, nickboss iptanus file upload +1 more WordPress File Upload <= 4.24.8 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload CVE-2024-7301 7.2 HighAugust 16, 2024
• iptanus wordpress file upload, nickboss iptanus file upload +1 more WordPress File Upload <= 4.24.7 - Authenticated (Contributor+) Directory Traversal CVE-2024-5852 4.3 MediumJuly 16, 2024
• iptanus wordpress file upload, nickboss iptanus file upload +1 more WordPress File Upload <= 4.24.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2024-2847 6.4 MediumApril 9, 2024
• iptanus wordpress file upload, wordpress file upload pro, nickboss iptanus file upload +2 more WordPress File Upload / WordPress File Upload Pro <= 4.19.1 - Authenticated (Administrator+) Path Traversal CVE-2023-2688 4.9 MediumJune 9, 2023
• iptanus wordpress file upload, wordpress file upload pro, nickboss iptanus file upload +2 more WordPress File Upload / WordPress File Upload Pro <= 4.19.1 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-2767 4.4 MediumJune 9, 2023