Skip to content
Noroxi

iptanus records

25 published records for vendor iptanus.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
3
With a fix record
12%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18
  2. 19
  3. 20
  4. 22
  5. 23
  6. 24
  7. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

25 records
  • CVE-2024-9047
    67This week

    WordPress File Upload <= 4.24.11 - Unauthenticated Path Traversal to Arbitrary File Read and Deletion in wfu_file_downloader.php

    CriticalCVSS 9.8Proof of conceptEPSS 93%

    iptanus · wordpress file uploadOct 12, 2024

  • CVE-2020-10564
    42Plan

    An issue was discovered in the File Upload plugin before 4.13.0 for WordPress.

    CriticalCVSS 9.8No exploitEPSS 9%

    iptanus · wordpress file uploadMar 13, 2020

  • CVE-2024-11613
    40Plan

    WordPress File Upload <= 4.24.15 - Unauthenticated Remote Code Execution, Arbitrary File Read, and Arbitrary File Deletion

    CriticalCVSS 9.8Proof of conceptEPSS 4%

    iptanus · wordpress file uploadJan 8, 2025

  • CVE-2024-11635
    39Monitor

    WordPress File Upload <= 4.24.12 - Unuathenticated Remote Code Execution

    CriticalCVSS 9.8Proof of conceptEPSS 1%

    iptanus · wordpress file uploadJan 8, 2025

  • CVE-2021-24962
    36Monitor

    WordPress File Upload < 4.16.3 - Contributor+ Path Traversal to RCE

    HighCVSS 8.8No exploitEPSS 3%

    iptanus · wordpress file uploadMar 28, 2022

  • CVE-2015-9338
    30Monitor

    The wp-file-upload plugin before 2.5.0 for WordPress has insufficient restrictions on upload of .php files.

    HighCVSS 7.5No exploitEPSS 1%

    iptanus · wordpress file uploadAug 22, 2019

  • CVE-2015-9341
    30Monitor

    The wp-file-upload plugin before 3.4.1 for WordPress has insufficient restrictions on upload of .php.js files.

    HighCVSS 7.5No exploitEPSS 1%

    iptanus · wordpress file uploadAug 22, 2019

  • CVE-2015-9340
    30Monitor

    The wp-file-upload plugin before 3.0.0 for WordPress has insufficient restrictions on upload of php, js, pht, php3, php4, php5, phtml, htm,

    HighCVSS 7.5No exploitEPSS 1%

    iptanus · wordpress file uploadAug 22, 2019

  • CVE-2015-9339
    30Monitor

    The wp-file-upload plugin before 2.7.1 for WordPress has insufficient restrictions on upload of .js files.

    HighCVSS 7.5No exploitEPSS 1%

    iptanus · wordpress file uploadAug 22, 2019

  • CVE-2024-9939
    30Monitor

    WordPress File Upload <= 4.24.13 - Unauthenticated Path Traversal to Arbitrary File Read in wfu_file_downloader.php

    HighCVSS 7.5No exploitEPSS 1%

    iptanus · wordpress file uploadJan 8, 2025

  • CVE-2024-6651
    29Monitor

    WordPress File Upload < 4.24.8 - Reflected XSS

    MediumCVSS 6.1Proof of conceptEPSS 15%

    iptanus · wordpress file uploadAug 6, 2024

  • CVE-2018-9844
    25Monitor

    The Iptanus WordPress File Upload plugin before 4.3.4 for WordPress mishandles Settings attributes, leading to XSS.

    MediumCVSS 6.1Proof of conceptEPSS 4%

    iptanus · wordpress file uploadApr 7, 2018

  • CVE-2024-7301
    24Monitor

    WordPress File Upload <= 4.24.8 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload

    MediumCVSS 6.1No exploitEPSS 0%

    iptanus · wordpress file uploadAug 16, 2024

  • CVE-2024-6494
    24Monitor

    WordPress File Upload < 4.24.8 - Unauthenticated Stored XSS

    MediumCVSS 6.1No exploitEPSS 0%

    iptanus · wordpress file uploadAug 7, 2024

  • CVE-2018-9172
    22Monitor

    The Iptanus WordPress File Upload plugin before 4.3.3 for WordPress mishandles shortcode attributes.

    MediumCVSS 5.4Proof of conceptEPSS 3%

    iptanus · wordpress file uploadApr 1, 2018

  • CVE-2023-2767
    22Monitor

    WordPress File Upload / WordPress File Upload Pro <= 4.19.1 - Authenticated (Administrator+) Stored Cross-Site Scripting

    MediumCVSS 5.5No exploitEPSS 0%

    iptanus · wordpress file uploadJun 9, 2023

  • CVE-2021-24960
    21Monitor

    WordPress File Upload < 4.16.3 - Contributor+ Stored Cross-Site Scripting via Malicious SVG

    MediumCVSS 5.4No exploitEPSS 1%

    iptanus · wordpress file uploadMar 7, 2022

  • CVE-2021-24961
    21Monitor

    WordPress File Upload < 4.16.3 - Contributor+ Stored Cross-Site Scripting via Shortcode

    MediumCVSS 5.4No exploitEPSS 1%

    iptanus · wordpress file uploadMar 7, 2022

  • CVE-2023-4811
    21Monitor

    WordPress File Upload < 4.23.3 - Author+ Stored Cross-Site Scripting

    MediumCVSS 5.4No exploitEPSS 0%

    iptanus · wordpress file uploadOct 16, 2023

  • CVE-2024-2847
    21Monitor

    WordPress File Upload <= 4.24.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    MediumCVSS 5.4No exploitEPSS 0%

    iptanus · wordpress file uploadApr 9, 2024

  • CVE-2023-2688
    20Monitor

    WordPress File Upload / WordPress File Upload Pro <= 4.19.1 - Authenticated (Administrator+) Path Traversal

    MediumCVSS 4.9No exploitEPSS 2%

    iptanus · wordpress file uploadJun 9, 2023

  • CVE-2024-5852
    17Monitor

    WordPress File Upload <= 4.24.7 - Authenticated (Contributor+) Directory Traversal

    MediumCVSS 4.3No exploitEPSS 1%

    iptanus · wordpress file uploadJul 16, 2024

  • CVE-2024-12719
    17Monitor

    WordPress File Upload <= 4.24.15 - Missing Authorization to Authenticated (Subscriber+) Limited Path Traversal

    MediumCVSS 4.3No exploitEPSS 0%

    iptanus · wordpress file uploadJan 7, 2025

  • CVE-2024-13494
    17Monitor

    WordPress File Upload <= 4.25.2 - Cross-Site Request Forgery in wfu_file_details

    MediumCVSS 4.3No exploitEPSS 0%

    iptanus · wordpress file uploadFeb 25, 2025

  • CVE-2024-39639
    14Monitor

    WordPress File Upload plugin <= 4.24.7 - Broken Access Control + CSRF vulnerability

    LowCVSS 3.5No exploitEPSS 0%

    iptanus · wordpress file uploadNov 1, 2024