High
CVE-2026-62071
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 38
Reset filters
High
CVE-2026-66447
Iptanus File Upload <= 5.1.7 - Unauthenticated SQL Injection
High
CVE-2026-17044
File Upload <= 5.1.7 - Unauthenticated SQL Injection
Medium
CVE-2025-15546
Iptanus File Upload <= 5.1.6 - Unauthenticated Race Condition to File Overwrite
Medium
CVE-2024-13494
WordPress File Upload <= 4.25.2 - Cross-Site Request Forgery in wfu_file_details
Critical
CVE-2024-11635
WordPress File Upload <= 4.24.12 - Unuathenticated Remote Code Execution
High
CVE-2024-9939
WordPress File Upload <= 4.24.13 - Unauthenticated Path Traversal to Arbitrary File Read in wfu_file_downloader.php
Critical
CVE-2024-11613
WordPress File Upload <= 4.24.15 - Unauthenticated Remote Code Execution, Arbitrary File Read, and Arbitrary File Deletion
Medium
CVE-2024-12719
WordPress File Upload <= 4.24.15 - Missing Authorization to Authenticated (Subscriber+) Limited Path Traversal
Critical
CVE-2024-9047
WordPress File Upload <= 4.24.11 - Unauthenticated Path Traversal to Arbitrary File Read and Deletion in wfu_file_downloader.php
High
CVE-2024-7301
WordPress File Upload <= 4.24.8 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-39639
WordPress File Upload <= 4.24.7 - Missing Authorization
Medium
CVE-2024-6651
WordPress File Upload <= 4.24.7 - Reflected Cross-Site Scripting
High
CVE-2024-6494
WordPress File Upload <= 4.24.7 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-5852
WordPress File Upload <= 4.24.7 - Authenticated (Contributor+) Directory Traversal
Medium
CVE-2024-2847
WordPress File Upload <= 4.24.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
b6048088-c11c-4741-8dde-da707f8f84f2
Wordpress File Upload 4.24.0 - Cross-Site Request Forgery
Medium
CVE-2023-4811
Wordpress File Upload <= 4.23.2 - Authenticated(Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-2688
WordPress File Upload / WordPress File Upload Pro <= 4.19.1 - Authenticated (Administrator+) Path Traversal
Medium
CVE-2023-2767
WordPress File Upload / WordPress File Upload Pro <= 4.19.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
cb105ff0-5085-4813-81a6-b1f0798d576c
MainWP (Various extensions) - Cross-Site Request Forgery
Critical
CVE-2023-23656
MainWP File Uploader Extension <= 4.1 - Unauthenticated Arbitrary File Upload
High
CVE-2023-23653
MainWP File Uploader Extension <= 4.1 - Authenticated (Subscriber+) Arbitrary File Deletion
Medium
7534f2e5-a296-4c54-99e3-d84f5c9a5b51
WordPress File Upload <= 4.16.3 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.