Wordpress File Upload (Unknown) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2024-08-07. Vendor: Unknown.

CVEs of Wordpress File Upload

• CVE-2024-6494 - CVSS 6.1 (medium), 2024-08-07: The WordPress File Upload WordPress plugin before 4.24.8 does not properly sanitize and escape certain parameters, which could allow unauthenticated users to…
• CVE-2024-6651 - CVSS 6.1 (medium), 2024-08-06: The WordPress File Upload WordPress plugin before 4.24.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a…
• CVE-2023-4811 - CVSS 5.4 (medium), 2023-10-16: The WordPress File Upload WordPress plugin before 4.23.3 does not sanitise and escape some of its settings, which could allow high privilege users such as…
• CVE-2021-24962 - CVSS 8.8 (high), 2022-03-28: The WordPress File Upload Free and Pro WordPress plugins before 4.16.3 allow users with a role as low as Contributor to perform path traversal via a shortcode…
• CVE-2021-24961 - CVSS 5.4 (medium), 2022-03-07: The WordPress File Upload WordPress plugin before 4.16.3, wordpress-file-upload-pro WordPress plugin before 4.16.3 does not escape some of its shortcode…
• CVE-2021-24960 - CVSS 5.4 (medium), 2022-03-07: The WordPress File Upload WordPress plugin before 4.16.3, wordpress-file-upload-pro WordPress plugin before 4.16.3 allows users with a role as low as…