NNickboss

Products

Exploited and recent CVEs

• CVE-2026-66570 High 7.1 WordPress WordPress File Upload plugin <= 5.2.1 - Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2026-62071 Critical 9.3 WordPress WordPress File Upload plugin <= 5.1.10 - SQL Injection vulnerability 0.2%
• CVE-2026-66447 Critical 9.3 WordPress WordPress File Upload plugin <= 5.1.7 - SQL Injection vulnerability 0.4%
• CVE-2024-13494 Medium 4.3 WordPress File Upload <= 4.25.2 - Cross-Site Request Forgery in wfu_file_details 0.2%
• CVE-2024-9939 High 7.5 WordPress File Upload <= 4.24.13 - Unauthenticated Path Traversal to Arbitrary File Read in wfu_file_downloader.php 1.0%
• CVE-2024-11635 Critical 9.8 WordPress File Upload <= 4.24.12 - Unuathenticated Remote Code Execution 1.5%
• CVE-2024-11613 Critical 9.8 WordPress File Upload <= 4.24.15 - Unauthenticated Remote Code Execution, Arbitrary File Read, and Arbitrary File Deletion 4.4%
• CVE-2024-12719 Medium 4.3 WordPress File Upload <= 4.24.15 - Missing Authorization to Authenticated (Subscriber+) Limited Path Traversal 0.4%
• CVE-2024-9047 Critical 9.8 WordPress File Upload <= 4.24.11 - Unauthenticated Path Traversal to Arbitrary File Read and Deletion in wfu_file_downloader.php 93.3%
• CVE-2024-7301 High 7.2 WordPress File Upload <= 4.24.8 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload 0.5%
• CVE-2024-5852 Medium 4.3 WordPress File Upload <= 4.24.7 - Authenticated (Contributor+) Directory Traversal 0.7%
• CVE-2024-2847 Medium 6.4 WordPress File Upload <= 4.24.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.4%
• CVE-2023-2688 Medium 4.9 WordPress File Upload / WordPress File Upload Pro <= 4.19.1 - Authenticated (Administrator+) Path Traversal 1.7%
• CVE-2023-2767 Medium 4.4 WordPress File Upload / WordPress File Upload Pro <= 4.19.1 - Authenticated (Administrator+) Stored Cross-Site Scripting 0.4%