WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-file-upload
Published
2015-05-09
Title
WordPress File Upload < 2.7.1 - JS File Upload
Slug
wp-file-upload
Published
2015-01-23
Title
WordPress File Upload < 2.5.0 - PHP File Upload
Slug
wp-file-upload
Published
2020-03-13
Title
WordPress File Upload < 4.13.0 - Directory Traversal to RCE
Slug
wp-file-upload
Published
2022-02-14
Title
WordPress File Upload < 4.16.3 - Contributor+ Stored Cross-Site Scripting via Shortcode
Slug
wp-file-upload
Published
2022-02-14
Title
WordPress File Upload < 4.16.3 - Contributor+ Stored Cross-Site Scripting via Malicious SVG
Slug
wp-file-upload
Published
2022-03-01
Title
WordPress File Upload < 4.16.3 - Contributor+ Path Traversal to RCE
Slug
wp-file-upload
Published
2023-05-23
Title
WordPress File Upload < 4.19.2 - Admin+ Path Traversal
Slug
wp-file-upload
Published
2023-05-23
Title
WordPress File Upload and WordPress File Upload Pro < 4.19.2 - Admin+ Stored Cross-Site Scripting
Slug
wp-file-upload
Published
2023-09-25
Title
WordPress File Upload < 4.23.3 - Author+ Stored Cross-Site Scripting
Slug
wp-file-upload
Published
2023-11-14
Title
Wordpress File Upload < 4.24.1 - Cross-Site Request Forgery
Slug
wp-file-upload
Published
2024-03-29
Title
WordPress File Upload < 4.24.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
wp-file-upload
Published
2024-07-15
Title
WordPress File Upload < 4.24.8 - Authenticated (Contributor+) Directory Traversal
Slug
wp-file-upload
Published
2024-07-16
Title
WordPress File Upload < 4.24.8 - Unauthenticated Stored XSS
Slug
wp-file-upload
Published
2024-07-16
Title
WordPress File Upload < 4.24.8 - Reflected XSS
Slug
wp-file-upload
Published
2024-08-01
Title
WordPress File Upload < 4.24.8 - Missing Authorization
Slug
wp-file-upload
Published
2024-08-15
Title
WordPress File Upload < 4.24.9 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload
Slug
wp-file-upload
Published
2024-10-11
Title
WordPress File Upload < 4.24.12 - Unauthenticated Path Traversal to Arbitrary File Read and Deletion in wfu_file_downloader.php
Slug
wp-file-upload
Published
2025-01-06
Title
WordPress File Upload < 4.25.0 - Missing Authorization to Authenticated (Subscriber+) Limited Path Traversal
Slug
wp-file-upload
Published
2025-01-07
Title
WordPress File Upload < 4.25.0 - Unauthenticated Remote Code Execution, Arbitrary File Read, and Arbitrary File Deletion
Slug
wp-file-upload
Published
2025-01-07
Title
WordPress File Upload < 4.24.14 - Unuathenticated Remote Code Execution
Slug
wp-file-upload
Published
2025-01-07
Title
WordPress File Upload < 4.24.14 - Unauthenticated Path Traversal to Arbitrary File Read in wfu_file_downloader.php
Slug
wp-file-upload
Published
2025-02-24
Title
WordPress File Upload < 4.25.3 - Cross-Site Request Forgery in wfu_file_details
Slug
wp-file-uploader
Published
2014-08-01
Title
File Uploader - PHP File Upload
Slug
wp-filebase
Published
2014-08-01
Title
WP-Filebase Download Manager 0.3.0.02 - class/Admin.php GetFileHash Function Remote Comm& Execution
Slug
wp-filebase
Published
2014-08-01
Title
WP-Filebase 0.2.9.24- Unspecified Vulnerabilities