Unknown Wordpress File Upload vulnerabilities

• nickboss wordpress file upload WordPress WordPress File Upload plugin <= 5.2.1 - Cross Site Scripting (XSS) vulnerability CVE-2026-66570 7.1 HighNovember 1, 2026
• nickboss wordpress file upload WordPress WordPress File Upload plugin <= 5.1.10 - SQL Injection vulnerability CVE-2026-62071 9.3 CriticalOctober 1, 2026
• nickboss wordpress file upload WordPress WordPress File Upload plugin <= 5.1.7 - SQL Injection vulnerability CVE-2026-66447 9.3 CriticalAugust 6, 2026
• iptanus wordpress file upload WordPress File Upload plugin <= 4.24.7 - Broken Access Control + CSRF vulnerability CVE-2024-39639 4.3 MediumNovember 1, 2024
• iptanus wordpress file upload, wordpress file upload project file upload +1 more WordPress File Upload < 4.24.8 - Unauthenticated Stored XSS CVE-2024-6494 6.1 MediumAugust 7, 2024
• iptanus wordpress file upload, wordpress file upload project file upload +1 more WordPress File Upload < 4.24.8 - Reflected XSS CVE-2024-6651 Public exploit EPSS 15.7% 6.1 MediumAugust 6, 2024
• iptanus wordpress file upload WordPress File Upload < 4.23.3 - Author+ Stored Cross-Site Scripting CVE-2023-4811 5.4 MediumOctober 16, 2023
• iptanus wordpress file upload, wordpress file upload pro, nickboss iptanus file upload +2 more WordPress File Upload / WordPress File Upload Pro <= 4.19.1 - Authenticated (Administrator+) Path Traversal CVE-2023-2688 4.9 MediumJune 9, 2023
• iptanus wordpress file upload, wordpress file upload pro, nickboss iptanus file upload +2 more WordPress File Upload / WordPress File Upload Pro <= 4.19.1 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-2767 4.4 MediumJune 9, 2023
• iptanus wordpress file upload, wordpress file upload pro +1 more WordPress File Upload < 4.16.3 - Contributor+ Path Traversal to RCE CVE-2021-24962 8.8 HighMarch 28, 2022
• iptanus wordpress file upload, unknown wordpress-file-upload-pro, iptanus wordpress file upload pro +2 more WordPress File Upload < 4.16.3 - Contributor+ Stored Cross-Site Scripting via Shortcode CVE-2021-24961 5.4 MediumMarch 7, 2022
• iptanus wordpress file upload, unknown wordpress-file-upload-pro, iptanus wordpress file upload pro +2 more WordPress File Upload < 4.16.3 - Contributor+ Stored Cross-Site Scripting via Malicious SVG CVE-2021-24960 5.4 MediumMarch 7, 2022