All in One Files Upload vulnerabilities
We track 1 vulnerability in All in One Files Upload products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 30, 2026.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest All in One Files Upload vulnerabilities
- 8.8 High severity
All in One Files Upload: Improper Neutralization of Input During Web Page Generation
The All in One Files Upload WordPress plugin before 2.0.17 adds SVG to the site's allowed upload types and does not sanitise uploaded files or verify the authenticity of its public upload requests, allowing unauthenticated users to store files containing activ