Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

nickboss — Vulnerabilities & Security Advisories 11

Browse all 11 CVE security advisories affecting nickboss. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Nickboss primarily develops web applications and APIs for enterprise clients, with a core focus on custom business solutions. Historically, vulnerabilities associated with this entity include remote code execution, cross-site scripting, and privilege escalation, often stemming from input validation flaws and misconfigured access controls. Security assessments reveal inconsistent patch management and inadequate parameter sanitization in several products. While no major public breaches have been directly attributed to nickboss, the accumulation of 11 CVEs indicates systemic security challenges requiring remediation efforts. The pattern of vulnerabilities suggests a need for strengthened secure coding practices and more rigorous security testing protocols across development lifecycles.

Found 11 results / 11Clear Filters
Top products by nickboss: Iptanus File Upload
CVE IDTitleCVSSSeverityPublished
CVE-2024-13494 WordPress File Upload <= 4.25.2 - Cross-Site Request Forgery in wfu_file_details — Iptanus File UploadCWE-352 4.3 Medium2025-02-25
CVE-2024-9939 WordPress File Upload <= 4.24.13 - Unauthenticated Path Traversal to Arbitrary File Read in wfu_file_downloader.php — Iptanus File UploadCWE-22 7.5 High2025-01-08
CVE-2024-11635 WordPress File Upload <= 4.24.12 - Unuathenticated Remote Code Execution — Iptanus File UploadCWE-94 9.8 Critical2025-01-08
CVE-2024-11613 WordPress File Upload <= 4.24.15 - Unauthenticated Remote Code Execution, Arbitrary File Read, and Arbitrary File Deletion — Iptanus File UploadCWE-94 9.8 Critical2025-01-08
CVE-2024-12719 WordPress File Upload <= 4.24.15 - Missing Authorization to Authenticated (Subscriber+) Limited Path Traversal — Iptanus File UploadCWE-862 4.3 Medium2025-01-07
CVE-2024-9047 WordPress File Upload <= 4.24.11 - Unauthenticated Path Traversal to Arbitrary File Read and Deletion in wfu_file_downloader.php — Iptanus File UploadCWE-22 9.8 Critical2024-10-12
CVE-2024-7301 WordPress File Upload <= 4.24.8 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload — Iptanus File UploadCWE-79 7.2 High2024-08-16
CVE-2024-5852 WordPress File Upload <= 4.24.7 - Authenticated (Contributor+) Directory Traversal — Iptanus File UploadCWE-22 4.3 Medium2024-07-16
CVE-2024-2847 WordPress File Upload <= 4.24.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode — Iptanus File UploadCWE-79 6.4 Medium2024-04-09
CVE-2023-2688 WordPress File Upload / WordPress File Upload Pro <= 4.19.1 - Authenticated (Administrator+) Path Traversal — Iptanus File UploadCWE-22 4.9 Medium2023-06-09
CVE-2023-2767 WordPress File Upload / WordPress File Upload Pro <= 4.19.1 - Authenticated (Administrator+) Stored Cross-Site Scripting — Iptanus File UploadCWE-79 4.4 Medium2023-06-09

This page lists every published CVE security advisory associated with nickboss. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.