CVE-2024-9047

POC - 버전 면책 조항 : 본 개념 증명POC은 교육 및 윤리적 테스트 목적으로만 제작되었습니다. 사전 상호 동의 없이 대상을 공격하기 위해 이 도구를 사용하는 것은 불법입니다. 모든 관련 지방, 주, 연방 법률을 준수할 책임은 최종 사용자에게 있습니다. 개발자는 이 프로그램으로 인해 발생한 오용이나 피해에 대해 어떠한 책임도 지지 않습니다. 시작하기 대상 찾기 잠재적 대상을 식별하려면 FofaShodan.io와 유사한 검색 엔진를 다음 쿼리와 함께 사용할 수 있습니다: Fofa Dork :...

CVE-2024-11613-wp-file-upload

CVE-2024-11613-wp-file-upload Эксплойт от Chirag Artani https://3rag.com для CVE-2024-11613 в WordPress File Upload Вот информация — Плагин WordPress File Upload для WordPress уязвим к удалённому выполнению кода, произвольному чтению файлов и произвольному удалению файлов во всех версиях до 4.24....

CVE-2026-62071 WordPress WordPress File Upload plugin <= 5.1.10 - SQL Injection vulnerability

Unauthenticated SQL Injection in WordPress File Upload = 5.1.10 versions...

CVE-2026-62071

The WordPress File Upload plugin (versions

CVE-2024-11635

WordPress File Upload Этот README документирует раскрытую уязвимость только для образовательного и защитного использования.Не запускайте тесты против производственных систем или систем, которые вам не принадлежат или на тестирование которых у вас нет явного разрешения. Обнаружена: abrahack Статус...

CVE-2024-9047

CVE-2024-9047 CVE-2024-9047, wfufiledownloader.php Accès via le fichier wfufiledownloader.php, WordPress File Upload Solution poc, vulnérabilité de la solution, permettant d'accéder arbitrairement aux fichiers, de les manipuler ou de les modifier...

CVE-2024-9047-Exploit

CVE-2024-9047 : Exploit pour le plugin de téléversement de fichiers WordPress Description Le plugin WordPress File Upload pour WordPress est vulnérable à une faille de Path Traversal dans toutes les versions jusqu'à et y compris la version 4.24.11 via le fichier wfufiledownloader.php. Cette...

CVE-2026-17044

The Iptanus File Upload WordPress plugin versions prior to 5.1.8 is vulnerable to an SQL injection because it fails to properly sanitize and escape the uniqueuploadid parameter before incorporating it into a SQL statement. This flaw allows unauthenticated users to execute malicious SQL code, pote...

CVE-2026-66447

Unauthenticated SQL Injection in WordPress File Upload = 5.1.7 versions...

CVE-2026-66447 WordPress WordPress File Upload plugin <= 5.1.7 - SQL Injection vulnerability

Unauthenticated SQL Injection in WordPress File Upload = 5.1.7 versions...

CVE-2026-66447

CVE-2026-66447 : Unauthenticated SQL Injection in WordPress File Upload plugin

WordPress WordPress File Upload plugin <= 5.1.7 - SQL Injection vulnerability

SQL Injection vulnerability discovered by daroo in WordPress Plugin WordPress File Upload versions = 5.1.7...

📄 WordPress File Upload 4.24.11 Path Traversal / Remote Code Execution

A critical unauthenticated remote code execution vulnerability exists in the WordPress File Upload plugin versions 4.24.11 and earlier. The vulnerability allows attackers to execute arbitrary operating system commands through path traversal and improper input validation in the wfufiledownloader.p...

CVE-2024-39639

Broken Access Control vulnerability in Nickolas Bossinas WordPress File Upload allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordPress File Upload: from n/a through 4.24.7...

EUVD-2024-53874

Malicious code in bioql PyPI...

EUVD-2024-38329

Malicious code in bioql PyPI...

PT-2025-34069 · Undefined · Undefined

🔥 Critical & High-Severity CVEs 1. CVE-2025-27461 — Ivanti Connect Secure / Policy Secure Auth Bypass → RCE Severity: Critical 9.8 Vector: Exploitable over the internet; bypasses auth → remote code execution. Why it matters: Actively exploited by ransomware crews; initial access vector. Defender...

VulnCheck KEV: CVE-2024-9047

The WordPress File Upload plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 4.24.11 via wfufiledownloader.php. This makes it possible for unauthenticated attackers to read or delete files outside of the originally intended directory. Successful exploitatio...

CVE-2024-6494

The WordPress File Upload WordPress plugin before 4.24.8 does not properly sanitize and escape certain parameters, which could allow unauthenticated users to execute stored cross-site scripting XSS attacks...

CVE-2014-5199

Cross-site request forgery CSRF vulnerability in the WordPress File Upload plugin wp-file-upload before 2.4.2 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings via unspecified vectors. NOTE: some of these details are...