Nickboss WordPress File Upload
3 CVEs affecting Nickboss WordPress File Upload. Latest disclosed: 2026-11-01. Critical: 2, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-62071 | Critical | 9.3 | 2026-10-01 | Unauthenticated SQL Injection in WordPress File Upload <= 5.1.10 versions. |
CVE-2026-66447 | Critical | 9.3 | 2026-08-06 | Unauthenticated SQL Injection in WordPress File Upload <= 5.1.7 versions. |
CVE-2026-66570 | High | 7.1 | 2026-11-01 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nickboss WordPress File Upload wp-file-upload allows Stor… |