Nickboss WordPress File Upload

• CVE-2026-66570 High 7.1 WordPress WordPress File Upload plugin <= 5.2.1 - Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2026-62071 Critical 9.3 WordPress WordPress File Upload plugin <= 5.1.10 - SQL Injection vulnerability 0.2%
• CVE-2026-66447 Critical 9.3 WordPress WordPress File Upload plugin <= 5.1.7 - SQL Injection vulnerability 0.4%