CVE-2026-17044

CVE-2026-17044 affects the Iptanus File Upload WordPress plugin prior to 5.1.8. The issue is an SQL injection caused by improper sanitisation/escaping of a parameter used in a SQL statement, exploitable by unauthenticated users. Base score 8.6 (HIGH); remediation is to upgrade to 5.1.8 or later. ...

CVE-2026-17044 WordPress File Upload < 5.1.8 - Unauthenticated SQL Injection via uniqueuploadid

The Iptanus File Upload WordPress plugin before 5.1.8 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to an SQL injection exploitable by unauthenticated users...