Support Us — Your donation helps us keep running

Goal: 1000 CNY,Raised: 1000 CNY

100.0%

nickboss — Vulnerabilities & Security Advisories 11

Browse all 11 CVE security advisories affecting nickboss. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Top 10 Products nickboss:Iptanus File Upload
CVE IDTitleCVSSSeverityPaused
CVE-2024-13494 WordPress File Upload <= 4.25.2 - Cross-Site Request Forgery in wfu_file_details — Iptanus File UploadCWE-352 4.3 Medium2025-02-25
CVE-2024-9939 WordPress File Upload <= 4.24.13 - Unauthenticated Path Traversal to Arbitrary File Read in wfu_file_downloader.php — Iptanus File UploadCWE-22 7.5 High2025-01-08
CVE-2024-11635 WordPress File Upload <= 4.24.12 - Unuathenticated Remote Code Execution — Iptanus File UploadCWE-94 9.8 Critical2025-01-08
CVE-2024-11613 WordPress File Upload <= 4.24.15 - Unauthenticated Remote Code Execution, Arbitrary File Read, and Arbitrary File Deletion — Iptanus File UploadCWE-94 9.8 Critical2025-01-08
CVE-2024-12719 WordPress File Upload <= 4.24.15 - Missing Authorization to Authenticated (Subscriber+) Limited Path Traversal — Iptanus File UploadCWE-862 4.3 Medium2025-01-07
CVE-2024-9047 WordPress File Upload <= 4.24.11 - Unauthenticated Path Traversal to Arbitrary File Read and Deletion in wfu_file_downloader.php — Iptanus File UploadCWE-22 9.8 Critical2024-10-12
CVE-2024-7301 WordPress File Upload <= 4.24.8 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload — Iptanus File UploadCWE-79 7.2 High2024-08-16
CVE-2024-5852 WordPress File Upload <= 4.24.7 - Authenticated (Contributor+) Directory Traversal — Iptanus File UploadCWE-22 4.3 Medium2024-07-16
CVE-2024-2847 WordPress File Upload <= 4.24.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode — Iptanus File UploadCWE-79 6.4 Medium2024-04-09
CVE-2023-2688 WordPress File Upload / WordPress File Upload Pro <= 4.19.1 - Authenticated (Administrator+) Path Traversal — Iptanus File UploadCWE-22 4.9 Medium2023-06-09
CVE-2023-2767 WordPress File Upload / WordPress File Upload Pro <= 4.19.1 - Authenticated (Administrator+) Stored Cross-Site Scripting — Iptanus File UploadCWE-79 4.4 Medium2023-06-09

This page lists every published CVE security advisory associated with nickboss. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.