Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

Iptanus File Upload — Vulnerabilities & Security Advisories 12

All 12 CVE vulnerabilities found in Iptanus File Upload, with AI-generated Chinese analysis, references, and POCs.

Vendor: nickboss

CVE IDTitleCVSSSeverityPublished
CVE-2025-15546 Iptanus File Upload < 5.1.7 - File Overwrite via Race Condition --2026-06-14
CVE-2024-13494 WordPress File Upload <= 4.25.2 - Cross-Site Request Forgery in wfu_file_details CWE-352 4.3 Medium2025-02-25
CVE-2024-9939 WordPress File Upload <= 4.24.13 - Unauthenticated Path Traversal to Arbitrary File Read in wfu_file_downloader.php CWE-22 7.5 High2025-01-08
CVE-2024-11635 WordPress File Upload <= 4.24.12 - Unuathenticated Remote Code Execution CWE-94 9.8 Critical2025-01-08
CVE-2024-11613 WordPress File Upload <= 4.24.15 - Unauthenticated Remote Code Execution, Arbitrary File Read, and Arbitrary File Deletion CWE-94 9.8 Critical2025-01-08
CVE-2024-12719 WordPress File Upload <= 4.24.15 - Missing Authorization to Authenticated (Subscriber+) Limited Path Traversal CWE-862 4.3 Medium2025-01-07
CVE-2024-9047 WordPress File Upload <= 4.24.11 - Unauthenticated Path Traversal to Arbitrary File Read and Deletion in wfu_file_downloader.php CWE-22 9.8 Critical2024-10-12
CVE-2024-7301 WordPress File Upload <= 4.24.8 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload CWE-79 7.2 High2024-08-16
CVE-2024-5852 WordPress File Upload <= 4.24.7 - Authenticated (Contributor+) Directory Traversal CWE-22 4.3 Medium2024-07-16
CVE-2024-2847 WordPress File Upload <= 4.24.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CWE-79 6.4 Medium2024-04-09
CVE-2023-2688 WordPress File Upload / WordPress File Upload Pro <= 4.19.1 - Authenticated (Administrator+) Path Traversal CWE-22 4.9 Medium2023-06-09
CVE-2023-2767 WordPress File Upload / WordPress File Upload Pro <= 4.19.1 - Authenticated (Administrator+) Stored Cross-Site Scripting CWE-79 4.4 Medium2023-06-09

All 12 known CVE vulnerabilities affecting Iptanus File Upload with full Chinese analysis, references, and POCs where available.