Lucene search
+L

75 matches found

Kitploit
Kitploit
β€’added 2026/09/11 5:56 a.m.β€’10 views

CVE-2024-9047

POC - WordPress File Upload plugin, in the wfufiledownloader.php file before version = 4.24.11 - CVE-2024-9047 Overview The WordPress File Upload plugin is vulnerable due to improper input validation in the wfufiledownloader.php file, affecting versions = 4.24.11. This vulnerability allows...

9.8CVSS8.3AI score0.93339EPSS
SaveExploits4References1
Kitploit
Kitploit
β€’added 2026/09/10 7:30 a.m.β€’8 views

CVE-2024-11635

WordPress File Upload This README documents a disclosed vulnerability for educational and defensive use only. Donot run tests against production systems or systems you do not own or have explicit permission to test. Discovered by: abrahack Status: Public Disclosure Date Reported: 2025-01-07 CVE I...

9.8CVSS8.2AI score0.01474EPSS
SaveExploits1
Kitploit
Kitploit
β€’added 2026/09/10 12:53 a.m.β€’9 views

CVE-2024-11613-wp-file-upload

CVE-2024-11613-wp-file-upload Exploit by Chirag Artani https://3rag.com for CVE-2024-11613 in WordPress File Upload Here is information - The WordPress File Upload plugin for WordPress is vulnerable to Remote Code Execution, Arbitrary File Read, and Arbitrary File Deletion in all versions up to,...

9.8CVSS8.1AI score0.04465EPSS
SaveExploits0
Kitploit
Kitploit
β€’added 2026/09/09 1:04 a.m.β€’14 views

CVE-2024-9047

CVE-2024-9047 CVE-2024-9047, wfufiledownloader.php Access via wfufiledownloader.php file, WordPress File Upload Solution poc, solution vulnerability occurs, arbitrary file access, manipulation, or modification is possible...

9.8CVSS8.4AI score0.93339EPSS
SaveExploits4
Kitploit
Kitploit
β€’added 2026/09/07 2:46 p.m.β€’12 views

CVE-2024-9047-Exploit

CVE-2024-9047: Exploit para el plugin WordPress File Upload DescripciΓ³n El plugin WordPress File Upload para WordPress es vulnerable a una vulnerabilidad de Path Traversal en todas las versiones hasta la 4.24.11, inclusive, a travΓ©s del archivo wfufiledownloader.php. Esta vulnerabilidad permite a...

9.8CVSS8.3AI score0.93339EPSS
SaveExploits4
CVE
CVE
β€’added 2026/08/09 6:00 a.m.β€’73 views

CVE-2026-17044

CVE-2026-17044 affects the Iptanus File Upload WordPress plugin prior to 5.1.8. The issue is an SQL injection caused by improper sanitisation/escaping of a parameter used in a SQL statement, exploitable by unauthenticated users. Base score 8.6 (HIGH); remediation is to upgrade to 5.1.8 or later. ...

8.6CVSS5.5AI score0.00262EPSS
SaveExploits0References1
NVD
NVD
β€’added 2026/08/06 3:17 p.m.β€’26 views

CVE-2026-66447

Unauthenticated SQL Injection in WordPress File Upload = 5.1.7 versions...

9.3CVSS0.00229EPSS
SaveExploits0References1
Cvelist
Cvelist
β€’added 2026/08/06 2:27 p.m.β€’31 views

CVE-2026-66447 WordPress WordPress File Upload plugin <= 5.1.7 - SQL Injection vulnerability

Unauthenticated SQL Injection in WordPress File Upload = 5.1.7 versions...

9.3CVSS0.00229EPSS
SaveExploits0References1
CVE
CVE
β€’added 2026/08/06 2:27 p.m.β€’58 views

CVE-2026-66447

CVE-2026-66447 : Unauthenticated SQL Injection in WordPress File Upload plugin

9.3CVSS5.8AI score0.00229EPSS
SaveExploits0References1
Packet Storm
Packet Storm
β€’added 2026/03/02 12:00 a.m.β€’249 views

πŸ“„ WordPress File Upload 4.24.11 Path Traversal / Remote Code Execution

A critical unauthenticated remote code execution vulnerability exists in the WordPress File Upload plugin versions 4.24.11 and earlier. The vulnerability allows attackers to execute arbitrary operating system commands through path traversal and improper input validation in the wfufiledownloader.p...

9.8CVSS6.7AI score0.93339EPSS
SaveExploits4
RedhatCVE
RedhatCVE
β€’added 2026/01/09 9:03 a.m.β€’18 views

CVE-2024-39639

Broken Access Control vulnerability in Nickolas Bossinas WordPress File Upload allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordPress File Upload: from n/a through 4.24.7...

4.3CVSS6.9AI score0.00251EPSS
SaveExploits0References1
EUVD
EUVD
β€’added 2025/10/03 8:07 p.m.β€’12 views

EUVD-2024-53874

Malicious code in bioql PyPI...

4.3CVSS8.7AI score0.00164EPSS
SaveExploits0References2
EUVD
EUVD
β€’added 2025/10/03 8:07 p.m.β€’11 views

EUVD-2024-38329

Malicious code in bioql PyPI...

4.3CVSS6.5AI score0.00251EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
β€’added 2025/08/20 12:00 a.m.β€’30 views

PT-2025-34069 Β· Undefined Β· Undefined

πŸ”₯ Critical & High-Severity CVEs 1. CVE-2025-27461 β€” Ivanti Connect Secure / Policy Secure Auth Bypass β†’ RCE Severity: Critical 9.8 Vector: Exploitable over the internet; bypasses auth β†’ remote code execution. Why it matters: Actively exploited by ransomware crews; initial access vector. Defender...

9.8CVSS7.7AI score0.01605EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
β€’added 2025/05/27 12:00 a.m.β€’7 views

VulnCheck KEV: CVE-2024-9047

The WordPress File Upload plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 4.24.11 via wfufiledownloader.php. This makes it possible for unauthenticated attackers to read or delete files outside of the originally intended directory. Successful...

9.8CVSS7.2AI score0.93339EPSS
SaveExploits4References1
RedhatCVE
RedhatCVE
β€’added 2025/05/23 8:03 a.m.β€’17 views

CVE-2024-6494

The WordPress File Upload WordPress plugin before 4.24.8 does not properly sanitize and escape certain parameters, which could allow unauthenticated users to execute stored cross-site scripting XSS attacks...

6.1CVSS5.8AI score0.00362EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
β€’added 2025/05/22 4:15 a.m.β€’17 views

CVE-2014-5199

Cross-site request forgery CSRF vulnerability in the WordPress File Upload plugin wp-file-upload before 2.4.2 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings via unspecified vectors. NOTE: some of these details are...

6.8CVSS7.5AI score0.0097EPSS
SaveExploits0References1
NVD
NVD
β€’added 2025/02/25 8:15 a.m.β€’49 views

CVE-2024-13494

The WordPress File Upload plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.25.2. This is due to missing or incorrect nonce validation on the 'wfufiledetails' function. This makes it possible for unauthenticated attackers to modify user data...

4.3CVSS0.00164EPSS
SaveExploits0References2
Cvelist
Cvelist
β€’added 2025/02/25 7:30 a.m.β€’27 views

CVE-2024-13494 WordPress File Upload <= 4.25.2 - Cross-Site Request Forgery in wfu_file_details

The WordPress File Upload plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.25.2. This is due to missing or incorrect nonce validation on the 'wfufiledetails' function. This makes it possible for unauthenticated attackers to modify user data...

4.3CVSS0.00164EPSS
SaveExploits0References2
GithubExploit
GithubExploit
β€’added 2025/01/25 2:41 a.m.β€’423 views

Exploit for Path Traversal in Iptanus Wordpress_File_Upload

CVE-2024-9047: Exploit for WordPress File Upload Plugin De...

9.8CVSS9.9AI score0.93339EPSS
SaveExploits4
Rows per page
Query Builder