75 matches found
CVE-2024-11635
WordPress File Upload This README documents a disclosed vulnerability for educational and defensive use only. Donot run tests against production systems or systems you do not own or have explicit permission to test. Discovered by: abrahack Status: Public Disclosure Date Reported: 2025-01-07 CVE I...
CVE-2024-11613-wp-file-upload
CVE-2024-11613-wp-file-upload Exploit by Chirag Artani https://3rag.com for CVE-2024-11613 in WordPress File Upload Here is information - The WordPress File Upload plugin for WordPress is vulnerable to Remote Code Execution, Arbitrary File Read, and Arbitrary File Deletion in all versions up to,...
CVE-2024-9047
CVE-2024-9047 CVE-2024-9047, wfufiledownloader.php Access via wfufiledownloader.php file, WordPress File Upload Solution poc, solution vulnerability occurs, arbitrary file access, manipulation, or modification is possible...
CVE-2024-9047-Exploit
CVE-2024-9047: Exploit for WordPress File Upload Plugin Description The WordPress File Upload plugin for WordPress is vulnerable to a Path Traversal vulnerability in all versions up to, and including, 4.24.11 via the wfufiledownloader.php file. This vulnerability allows unauthenticated attackers ...
CVE-2024-9047
POC - WordPress File Upload 插件，wfufiledownloader.php 文件，版本 = 4.24.11 - CVE-2024-9047 概述 WordPress File Upload 插件由于在 wfufiledownloader.php 文件中存在不当的输入验证而存在漏洞，影响版本 = 4.24.11。该漏洞允许未认证用户从服务器文件系统下载任意文件，从而导致潜在的数据泄露和系统受损。 受影响设备 运行 WordPress 且安装了 File Upload 插件版本 = 4.24.11 的网站。...
CVE-2026-17044
CVE-2026-17044 affects the Iptanus File Upload WordPress plugin prior to 5.1.8. The issue is an SQL injection caused by improper sanitisation/escaping of a parameter used in a SQL statement, exploitable by unauthenticated users. Base score 8.6 (HIGH); remediation is to upgrade to 5.1.8 or later. ...
CVE-2026-66447
Unauthenticated SQL Injection in WordPress File Upload = 5.1.7 versions...
CVE-2026-66447 WordPress WordPress File Upload plugin <= 5.1.7 - SQL Injection vulnerability
Unauthenticated SQL Injection in WordPress File Upload = 5.1.7 versions...
CVE-2026-66447
CVE-2026-66447 : Unauthenticated SQL Injection in WordPress File Upload plugin
📄 WordPress File Upload 4.24.11 Path Traversal / Remote Code Execution
A critical unauthenticated remote code execution vulnerability exists in the WordPress File Upload plugin versions 4.24.11 and earlier. The vulnerability allows attackers to execute arbitrary operating system commands through path traversal and improper input validation in the wfufiledownloader.p...
CVE-2024-39639
Broken Access Control vulnerability in Nickolas Bossinas WordPress File Upload allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordPress File Upload: from n/a through 4.24.7...
EUVD-2024-53874
Malicious code in bioql PyPI...
EUVD-2024-38329
Malicious code in bioql PyPI...
PT-2025-34069 · Undefined · Undefined
🔥 Critical & High-Severity CVEs 1. CVE-2025-27461 — Ivanti Connect Secure / Policy Secure Auth Bypass → RCE Severity: Critical 9.8 Vector: Exploitable over the internet; bypasses auth → remote code execution. Why it matters: Actively exploited by ransomware crews; initial access vector. Defender...
VulnCheck KEV: CVE-2024-9047
The WordPress File Upload plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 4.24.11 via wfufiledownloader.php. This makes it possible for unauthenticated attackers to read or delete files outside of the originally intended directory. Successful...
CVE-2024-6494
The WordPress File Upload WordPress plugin before 4.24.8 does not properly sanitize and escape certain parameters, which could allow unauthenticated users to execute stored cross-site scripting XSS attacks...
CVE-2014-5199
Cross-site request forgery CSRF vulnerability in the WordPress File Upload plugin wp-file-upload before 2.4.2 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings via unspecified vectors. NOTE: some of these details are...
CVE-2024-13494
The WordPress File Upload plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.25.2. This is due to missing or incorrect nonce validation on the 'wfufiledetails' function. This makes it possible for unauthenticated attackers to modify user data...
CVE-2024-13494 WordPress File Upload <= 4.25.2 - Cross-Site Request Forgery in wfu_file_details
The WordPress File Upload plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.25.2. This is due to missing or incorrect nonce validation on the 'wfufiledetails' function. This makes it possible for unauthenticated attackers to modify user data...
