Nickboss WordPress File Upload

3 CVEs affecting Nickboss WordPress File Upload. Latest disclosed: 2026-11-01. Critical: 2, High: 1.

Top CVEs affecting Nickboss WordPress File Upload
CVESeverityScorePublishedSummary
CVE-2026-62071Critical9.32026-10-01Unauthenticated SQL Injection in WordPress File Upload <= 5.1.10 versions.
CVE-2026-66447Critical9.32026-08-06Unauthenticated SQL Injection in WordPress File Upload <= 5.1.7 versions.
CVE-2026-66570High7.12026-11-01Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nickboss WordPress File Upload wp-file-upload allows Stor…