Wordpress File Upload vulnerabilities
4 known vulnerabilities in Wordpress File Upload from Iptanus. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
Iptanus File Upload: Improper Limitation of a Pathname to a Restricted Directory
The WordPress File Upload plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 4.24.13 via wfu_file_downloader.php. This makes it possible for unauthenticated attackers to read files outside of the originally intended dire
- 9.8 Critical severity
Iptanus File Upload: Improper Control of Generation of Code
The WordPress File Upload plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.24.12 via the 'wfu_ABSPATH' cookie parameter. This makes it possible for unauthenticated attackers to execute code on the server.
- 9.8 Critical severity
Iptanus File Upload: Improper Control of Generation of Code
The WordPress File Upload plugin for WordPress is vulnerable to Remote Code Execution, Arbitrary File Read, and Arbitrary File Deletion in all versions up to, and including, 4.24.15 via the 'wfu_file_downloader.php' file. This is due to lack of proper sanitiza
- 9.8 Critical severity
Iptanus File Upload: Improper Limitation of a Pathname to a Restricted Directory
The WordPress File Upload plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 4.24.11 via wfu_file_downloader.php. This makes it possible for unauthenticated attackers to read or delete files outside of the originally int