Known vulnerabilities in Unknown All in One Files Upload
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-85573 | The All in One Files Upload WordPress plugin before 2.0.17 adds SVG to the site's allowed upload types and does not… | 8.8 High | Sep 30, 2026 |
| CVE-2026-85576 | The All in One Files Upload WordPress plugin before 2.0.17 does not have any capability check, and does not verify the… | 4.3 Medium | Sep 30, 2026 |