Iptanus vulnerabilities
We track 4 vulnerabilities in Iptanus products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on January 8, 2025.
Latest Iptanus vulnerabilities
- 7.5 High severity
Iptanus File Upload: Improper Limitation of a Pathname to a Restricted Directory
The WordPress File Upload plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 4.24.13 via wfu_file_downloader.php. This makes it possible for unauthenticated attackers to read files outside of the originally intended dire
- 9.8 Critical severity
Iptanus File Upload: Improper Control of Generation of Code
The WordPress File Upload plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.24.12 via the 'wfu_ABSPATH' cookie parameter. This makes it possible for unauthenticated attackers to execute code on the server.
- 9.8 Critical severity
Iptanus File Upload: Improper Control of Generation of Code
The WordPress File Upload plugin for WordPress is vulnerable to Remote Code Execution, Arbitrary File Read, and Arbitrary File Deletion in all versions up to, and including, 4.24.15 via the 'wfu_file_downloader.php' file. This is due to lack of proper sanitiza
- 9.8 Critical severity
Iptanus File Upload: Improper Limitation of a Pathname to a Restricted Directory
The WordPress File Upload plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 4.24.11 via wfu_file_downloader.php. This makes it possible for unauthenticated attackers to read or delete files outside of the originally int