WordPress-File-Upload-4.24.11---Unauthenticated-Path-Traversal

WordPress-File-Upload-4.24.11---Unauthenticated-Path-Traversal CVE-2024-9047 A Python-based security tool to detect and exploit an arbitrary file read vulnerability in the WordPress WP File Upload plugin versions = 4.24.11...

CVE-2024-6651

CVE-2024-6651 POC XSS - CVE-2024-6651 Functional PoC for vulnerability CVE-2024-6651, which affects the plugin WP File Upload 4.24.8, allowing Reflected Cross-Site Scripting XSS in WordPress. 📌 Description This vulnerability allows arbitrary JavaScript code injection via an unsanitized parameter ...

CVE-2026-123460 WordPress WordPress File Upload plugin <= 5.2.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nickboss WordPress File Upload wp-file-upload allows Stored XSS.This issue affects WordPress File Upload: from n/a through 5.2.2...

EUVD-2026-119994

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nickboss WordPress File Upload wp-file-upload allows Stored XSS.This issue affects WordPress File Upload: from n/a through 5.2.2...

CVE-2026-123460: Nickboss WordPress File Upload: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nickboss…

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nickboss WordPress File Upload wp-file-upload allows Stored XSS.This issue affects WordPress File Upload: from n/a through 5.2.2...

PT-2026-140370

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nickboss WordPress File Upload wp-file-upload allows Stored XSS.This issue affects WordPress File Upload: from n/a through 5.2.2...

CVE-2026-66570

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nickboss WordPress File Upload wp-file-upload allows Stored XSS.This issue affects WordPress File Upload: from n/a through 5.2.1...

CVE-2026-66570

The Nickboss WordPress File Upload (wp-file-upload) plugin is vulnerable to Stored Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. This vulnerability affects versions from n/a through 5.2.1 . An attacker could potentially execute malicious scripts in...

CVE-2026-66570 WordPress WordPress File Upload plugin <= 5.2.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nickboss WordPress File Upload wp-file-upload allows Stored XSS.This issue affects WordPress File Upload: from n/a through 5.2.1...

CVE-2026-66570 WordPress WordPress File Upload plugin <= 5.2.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nickboss WordPress File Upload wp-file-upload allows Stored XSS.This issue affects WordPress File Upload: from n/a through 5.2.1...

CVE-2026-66570: Nickboss WordPress File Upload: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nickboss…

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nickboss WordPress File Upload wp-file-upload allows Stored XSS.This issue affects WordPress File Upload: from n/a through 5.2.1...

CVE-POC

SecNeural // CVE PoC Collection Authorized, defensive vulnera...

EUVD-2015-9180

Malware in sbrugna...

EUVD-2014-1277

Malware in sbrugna...

EUVD-2015-9181

Malware in sbrugna...

CVE-2014-125110

A vulnerability has been found in wp-file-upload Plugin up to 2.4.3 on WordPress and classified as problematic. Affected by this vulnerability is the function wfuajaxactioncallback of the file lib/wfuajaxactions.php. The manipulation leads to cross site scripting. The attack can be launched...

CVE-2014-125110 wp-file-upload Plugin wfu_ajaxactions.php wfu_ajax_action_callback cross site scripting

A vulnerability has been found in wp-file-upload Plugin up to 2.4.3 on WordPress and classified as problematic. Affected by this vulnerability is the function wfuajaxactioncallback of the file lib/wfuajaxactions.php. The manipulation leads to cross site scripting. The attack can be launched...

WordPress plugin wp-file-upload has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2024-10552 · WordPress · Wp-File-Upload

Name of the Vulnerable Software and Affected Versions: wp-file-upload Plugin versions up to 2.4.3 Description: A vulnerability has been found in the wp-file-upload Plugin, which is classified as problematic. The issue affects the function wfu ajax action callback of the file lib/wfu...

CVE-2014-125110: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in wp-file-upload Plugin up to 2.4.3 on WordPress and classified as problematic. Affected by this vulnerability is the function wfuajaxactioncallback of the file lib/wfuajaxactions.php. The manipulation leads to cross site scripting. The attack can be launched...