Upload Files Anywhere vulnerabilities

2 known vulnerabilities in Upload Files Anywhere from Vanquish. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Upload Files Anywhere: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2025-69380Feb 20, 2026Vanquish

  Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in vanquish Upload Files Anywhere wp-upload-files-anywhere allows Path Traversal.This issue affects Upload Files Anywhere: from n/a through <= 2.8.

• 8.6 High severity

  Upload Files Anywhere: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2025-69379Feb 20, 2026Vanquish

  Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in vanquish Upload Files Anywhere wp-upload-files-anywhere allows Path Traversal.This issue affects Upload Files Anywhere: from n/a through <= 2.8.