193 matches found
CVE-2026-66570
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nickboss WordPress File Upload wp-file-upload allows Stored XSS.This issue affects WordPress File Upload: from n/a through 5.2.1...
CVE-2026-66570 WordPress WordPress File Upload plugin <= 5.2.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nickboss WordPress File Upload wp-file-upload allows Stored XSS.This issue affects WordPress File Upload: from n/a through 5.2.1...
CVE-2026-66570
The Nickboss WordPress File Upload (wp-file-upload) plugin is vulnerable to Stored Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. This vulnerability affects versions from n/a through 5.2.1 . An attacker could potentially execute malicious scripts in...
EUVD-2026-114863
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nickboss WordPress File Upload wp-file-upload allows Stored XSS.This issue affects WordPress File Upload: from n/a through 5.2.1...
CVE-2026-66570 WordPress WordPress File Upload plugin <= 5.2.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nickboss WordPress File Upload wp-file-upload allows Stored XSS.This issue affects WordPress File Upload: from n/a through 5.2.1...
CVE-2024-9047
POC - WordPress File Upload plugin, in the wfufiledownloader.php file before version Disclaimer : This Proof of Concept POC is made for educational and ethical testing purposes only. Usage of this tool for attacking targets without prior mutual consent is illegal. It is the end user’s...
CVE-2024-9047-Exploit
CVE-2024-9047: Exploit for WordPress File Upload Plugin Description The WordPress File Upload plugin for WordPress is vulnerable to a Path Traversal vulnerability in all versions up to, and including, 4.24.11 via the wfufiledownloader.php file. This vulnerability allows unauthenticated attackers ...
CVE-2024-11635
WordPress File Upload This README documents a disclosed vulnerability for educational and defensive use only. Donot run tests against production systems or systems you do not own or have explicit permission to test. Discovered by: abrahack Status: Public Disclosure Date Reported: 2025-01-07 CVE I...
CVE-2026-66570: Nickboss WordPress File Upload: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nickboss…
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nickboss WordPress File Upload wp-file-upload allows Stored XSS.This issue affects WordPress File Upload: from n/a through 5.2.1...
CVE-2024-9047
CVE-2024-9047 CVE-2024-9047, wfufiledownloader.php Access via wfufiledownloader.php file, WordPress File Upload Solution poc, solution vulnerability occurs, arbitrary file access, manipulation, or modification is possible...
CVE-2024-11613-wp-file-upload
CVE-2024-11613-wp-file-upload Exploit by Chirag Artani https://3rag.com for CVE-2024-11613 in WordPress File Upload Here is information - The WordPress File Upload plugin for WordPress is vulnerable to Remote Code Execution, Arbitrary File Read, and Arbitrary File Deletion in all versions up to,...
WordPress WordPress File Upload plugin <= 5.2.1 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by fccsec.dev in WordPress Plugin WordPress File Upload versions = 5.2.1...
WordPress File Media Renamer plugin <= 1.3 - Author+ Arbitrary File Rename vulnerability
Author+ Arbitrary File Rename vulnerability discovered by Sebastian Riveros in WordPress Plugin File Media Renamer versions = 1.3...
WordPress File Uploads Addon for WooCommerce plugin 1.7.2-1.7.6 - Unauthenticated Direct File Access vulnerability
Unauthenticated Direct File Access vulnerability discovered by J4ck13Ch4n in WordPress Plugin File Uploads Addon for WooCommerce versions 1.7.2-1.7.6...
CVE-2026-62071 WordPress WordPress File Upload plugin <= 5.1.10 - SQL Injection vulnerability
Unauthenticated SQL Injection in WordPress File Upload = 5.1.10 versions...
CVE-2026-62071
The WordPress File Upload plugin (versions
CVE-2026-62071 WordPress WordPress File Upload plugin <= 5.1.10 - SQL Injection vulnerability
Unauthenticated SQL Injection in WordPress File Upload = 5.1.10 versions...
WordPress WordPress File Upload plugin <= 5.1.10 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Andy Urlep in WordPress Plugin WordPress File Upload versions = 5.1.10...
WordPress File Manager plugin 7.2.2-8.0.4 - Unauthenticated Database Backup Disclosure vulnerability
Unauthenticated Database Backup Disclosure vulnerability discovered by Jakub Herman in WordPress Plugin File Manager versions 7.2.2-8.0.4...
