Login Request a demo
IP
Vendor
Iptanus
2 products with CVEs on record
30
CVEs
0
On KEV
0
New 30D
Products
WF
Wordpress File Upload
Iptanus
9.8
25 CVEs0 on KEV0 new
WF
Wordpress File Upload Pro
Iptanus
8.8
5 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2024-13494
WF
Wordpress File Upload
Iptanus
4.3
0%
Feb 25WordPress File Upload <= 4.25.2 - Cross-Site Request Forgery in wfu_file_details
CVE-2024-9939
WF
Wordpress File Upload
Iptanus
7.5
1%
Jan 8WordPress File Upload <= 4.24.13 - Unauthenticated Path Traversal to Arbitrary File Read in wfu_file_downloader.php
CVE-2024-11635
WF
Wordpress File Upload
Iptanus
9.8
1%
Jan 8WordPress File Upload <= 4.24.12 - Unuathenticated Remote Code Execution
CVE-2024-11613
WF
Wordpress File Upload
Iptanus
9.8
4%
Jan 8WordPress File Upload <= 4.24.15 - Unauthenticated Remote Code Execution, Arbitrary File Read, and Arbitrary File Deletion
CVE-2024-12719
WF
Wordpress File Upload
Iptanus
4.3
0%
Jan 7WordPress File Upload <= 4.24.15 - Missing Authorization to Authenticated (Subscriber+) Limited Path Traversal
CVE-2024-39639
WF
Wordpress File Upload
Iptanus
3.5
0%
Nov 1WordPress File Upload plugin <= 4.24.7 - Broken Access Control + CSRF vulnerability
CVE-2024-9047
WF
Wordpress File Upload
Iptanus
9.8
93%
Oct 12WordPress File Upload <= 4.24.11 - Unauthenticated Path Traversal to Arbitrary File Read and Deletion in wfu_file_downloader.php
CVE-2024-7301
WF
Wordpress File Upload
Iptanus
6.1
0%
Aug 16WordPress File Upload <= 4.24.8 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload
CVE-2024-6494
WF
Wordpress File Upload
Iptanus
6.1
0%
Aug 7WordPress File Upload < 4.24.8 - Unauthenticated Stored XSS
CVE-2024-6651
WF
Wordpress File Upload
Iptanus
6.1
16%
Aug 6WordPress File Upload < 4.24.8 - Reflected XSS
CVE-2024-5852
WF
Wordpress File Upload
Iptanus
4.3
1%
Jul 16WordPress File Upload <= 4.24.7 - Authenticated (Contributor+) Directory Traversal
CVE-2024-2847
WF
Wordpress File Upload
Iptanus
5.4
0%
Apr 9WordPress File Upload <= 4.24.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2023-4811
WF
Wordpress File Upload
Iptanus
5.4
0%
Oct 16WordPress File Upload < 4.23.3 - Author+ Stored Cross-Site Scripting
CVE-2023-2688
WF
Wordpress File Upload
Iptanus
4.9
2%
Jun 9WordPress File Upload / WordPress File Upload Pro <= 4.19.1 - Authenticated (Administrator+) Path Traversal
CVE-2023-2767
WF
Wordpress File Upload Pro
Iptanus
5.5
0%
Jun 9WordPress File Upload / WordPress File Upload Pro <= 4.19.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
CVE-2021-24962
WF
Wordpress File Upload
Iptanus
8.8
3%
Mar 28The WordPress File Upload Free and Pro WordPress plugins before 4.16.3 allow users with a role as low as Contributor to perform path traversal via a shortcode argument, which can…
CVE-2021-24961
WF
Wordpress File Upload
Iptanus
5.4
1%
Mar 7The WordPress File Upload WordPress plugin before 4.16.3, wordpress-file-upload-pro WordPress plugin before 4.16.3 does not escape some of its shortcode argument, which could…
CVE-2021-24960
WF
Wordpress File Upload
Iptanus
5.4
1%
Mar 7The WordPress File Upload WordPress plugin before 4.16.3, wordpress-file-upload-pro WordPress plugin before 4.16.3 allows users with a role as low as Contributor to configure the…
CVE-2020-10564
WF
Wordpress File Upload
Iptanus
9.8
9%
Mar 13An issue was discovered in the File Upload plugin before 4.13.0 for WordPress
CVE-2015-9340
WF
Wordpress File Upload
Iptanus
7.5
1%
Aug 22The wp-file-upload plugin before 3.0.0 for WordPress has insufficient restrictions on upload of php, js, pht, php3, php4, php5, phtml, htm, html, and htaccess files
CVE-2015-9339
WF
Wordpress File Upload
Iptanus
7.5
1%
Aug 22The wp-file-upload plugin before 2.7.1 for WordPress has insufficient restrictions on upload of .js files
CVE-2015-9338
WF
Wordpress File Upload
Iptanus
7.5
1%
Aug 22The wp-file-upload plugin before 2.5.0 for WordPress has insufficient restrictions on upload of .php files
CVE-2015-9341
WF
Wordpress File Upload
Iptanus
7.5
1%
Aug 22The wp-file-upload plugin before 3.4.1 for WordPress has insufficient restrictions on upload of .php.js files
CVE-2018-9844
WF
Wordpress File Upload
Iptanus
6.1
4%
Apr 7The Iptanus WordPress File Upload plugin before 4.3.4 for WordPress mishandles Settings attributes, leading to XSS
CVE-2018-9172
WF
Wordpress File Upload
Iptanus
5.4
3%
Apr 1The Iptanus WordPress File Upload plugin before 4.3.3 for WordPress mishandles shortcode attributes