Skip to contentNickboss Iptanus File Upload vulnerabilities
- nickboss iptanus file uploadWordPress File Upload < 5.1.8 - Unauthenticated SQL Injection via uniqueuploadidCVE-2026-170448.6 High
- nickboss iptanus file uploadIptanus File Upload < 5.1.7 - File Overwrite via Race ConditionCVE-2025-155465.4 Medium
- iptanus wordpress file upload, nickboss iptanus file upload +1 moreWordPress File Upload <= 4.25.2 - Cross-Site Request Forgery in wfu_file_detailsCVE-2024-134944.3 Medium
- iptanus wordpress file upload, nickboss iptanus file upload +1 moreWordPress File Upload <= 4.24.13 - Unauthenticated Path Traversal to Arbitrary File Read in wfu_file_downloader.phpCVE-2024-99397.5 High
- iptanus wordpress file upload, nickboss iptanus file upload +1 moreWordPress File Upload <= 4.24.12 - Unuathenticated Remote Code ExecutionCVE-2024-11635Public exploit9.8 Critical
- iptanus wordpress file upload, nickboss iptanus file upload +1 moreWordPress File Upload <= 4.24.15 - Unauthenticated Remote Code Execution, Arbitrary File Read, and Arbitrary File DeletionCVE-2024-11613Public exploit9.8 Critical
- iptanus wordpress file upload, nickboss iptanus file upload +1 moreWordPress File Upload <= 4.24.15 - Missing Authorization to Authenticated (Subscriber+) Limited Path TraversalCVE-2024-127194.3 Medium
- iptanus wordpress file upload, nickboss iptanus file upload +1 moreWordPress File Upload <= 4.24.11 - Unauthenticated Path Traversal to Arbitrary File Read and Deletion in wfu_file_downloader.phpCVE-2024-9047Public exploitEPSS 93.3%9.8 Critical
- iptanus wordpress file upload, nickboss iptanus file upload +1 moreWordPress File Upload <= 4.24.8 - Unauthenticated Stored Cross-Site Scripting via SVG File UploadCVE-2024-73017.2 High
- iptanus wordpress file upload, nickboss iptanus file upload +1 moreWordPress File Upload <= 4.24.7 - Authenticated (Contributor+) Directory TraversalCVE-2024-58524.3 Medium
- iptanus wordpress file upload, nickboss iptanus file upload +1 moreWordPress File Upload <= 4.24.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2024-28476.4 Medium
- iptanus wordpress file upload, wordpress file upload pro, nickboss iptanus file upload +2 moreWordPress File Upload / WordPress File Upload Pro <= 4.19.1 - Authenticated (Administrator+) Path TraversalCVE-2023-26884.9 Medium
- iptanus wordpress file upload, wordpress file upload pro, nickboss iptanus file upload +2 moreWordPress File Upload / WordPress File Upload Pro <= 4.19.1 - Authenticated (Administrator+) Stored Cross-Site ScriptingCVE-2023-27674.4 Medium