NI
Vendor
nickboss
7
CVEs
0
On KEV
1
New 30D
Products
WF9.3
WordPress File Upload
nickboss
2 CVEs0 on KEV1 new
IF9.8
Iptanus File Upload
nickboss
5 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-62071 | WF WordPress File Upload nickboss | 9.3 | Oct 1 | WordPress WordPress File Upload plugin <= 5.1.10 - SQL Injection vulnerability |
| CVE-2026-66447 | WF WordPress File Upload nickboss | 9.3 | Aug 6 | WordPress WordPress File Upload plugin <= 5.1.7 - SQL Injection vulnerability |
| CVE-2024-13494 | IF Iptanus File Upload nickboss | 4.3 | Feb 25 | WordPress File Upload <= 4.25.2 - Cross-Site Request Forgery in wfu_file_details |
| CVE-2024-9939 | IF Iptanus File Upload nickboss | 7.5 | Jan 8 | WordPress File Upload <= 4.24.13 - Unauthenticated Path Traversal to Arbitrary File Read in wfu_file_downloader.php |
| CVE-2024-11635 | IF Iptanus File Upload nickboss | 9.8 | Jan 8 | WordPress File Upload <= 4.24.12 - Unuathenticated Remote Code Execution |
| CVE-2024-11613 | IF Iptanus File Upload nickboss | 9.8 | Jan 8 | WordPress File Upload <= 4.24.15 - Unauthenticated Remote Code Execution, Arbitrary File Read, and Arbitrary File Deletion |
| CVE-2024-12719 | IF Iptanus File Upload nickboss | 4.3 | Jan 7 | WordPress File Upload <= 4.24.15 - Missing Authorization to Authenticated (Subscriber+) Limited Path Traversal |
