Skip to content

Known vulnerabilities in nickboss WordPress File Upload

Is your version affected?

CVE Summary Score Published
CVE-2026-62071 Unauthenticated SQL Injection in WordPress File Upload <= 5.1.10 versions 9.3 Critical Oct 1, 2026
CVE-2026-66447 Unauthenticated SQL Injection in WordPress File Upload <= 5.1.7 versions 9.3 Critical Aug 6, 2026
CVE-2024-11635 The WordPress File Upload plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and… 9.8 Critical Jan 8, 2025
CVE-2024-11613 The WordPress File Upload plugin for WordPress is vulnerable to Remote Code Execution, Arbitrary File Read, and… 9.8 Critical Jan 8, 2025
CVE-2024-9047 The WordPress File Upload plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including,… 9.8 Critical Oct 12, 2024

Other nickboss products