Vendor

    Nickboss

    14 known vulnerabilities in products by Nickboss, 0 of them actively exploited (CISA KEV).

    Key figures

    14

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    5

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Nickboss
    CriticalCVE-2024-9047

    Nickboss Iptanus File Upload: Path Traversal

    also in 1 other product

    		9.8
    CriticalCVE-2024-11613

    Nickboss Iptanus File Upload: Code Injection

    also in 1 other product

    		9.8
    CriticalCVE-2024-11635

    WordPress File Upload <= 4.24.12 - Unuathenticated Remote Code Execution

    also in 1 other product

    		9.8
    CriticalCVE-2026-66447

    WordPress WordPress File Upload plugin <= 5.1.7 - SQL Injection vulnerability

    		9.3
    HighCVE-2024-9939

    Nickboss Iptanus File Upload: Path Traversal

    also in 1 other product

    		7.5
    CriticalCVE-2026-62071

    WordPress WordPress File Upload plugin <= 5.1.10 - SQL Injection vulnerability

    		9.3
    MediumCVE-2023-2688

    WordPress File Upload Pro: Path Traversal

    also in 2 other products

    		4.9
    HighCVE-2026-66570

    WordPress WordPress File Upload plugin <= 5.2.1 - Cross Site Scripting (XSS) vulnerability

    		7.1
    HighCVE-2024-7301

    WordPress File Upload <= 4.24.8 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload

    also in 1 other product

    		7.2
    MediumCVE-2024-5852

    WordPress File Upload <= 4.24.7 - Authenticated (Contributor+) Directory Traversal

    also in 1 other product

    		4.3
    MediumCVE-2024-2847

    Nickboss Iptanus File Upload: Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2024-12719

    Nickboss Iptanus File Upload: Missing Authorization

    also in 1 other product

    		4.3
    MediumCVE-2023-2767

    WordPress File Upload Pro: Cross-site Scripting

    also in 2 other products

    		4.4
    MediumCVE-2024-13494

    WordPress File Upload <= 4.25.2 - Cross-Site Request Forgery in wfu_file_details

    also in 1 other product

    		4.3

    Products

    Products by Nickboss
    Iptanus File Upload110
    Wordpress File Upload30