Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-08-26
Iptanus File Upload - SQL Injection (CVE-2026-17044)
The Iptanus File Upload WordPress plugin before 5.1.8 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to an SQL injection exploitable by unauthenticated users.
PLUGIN
Iptanus File Upload
CVE-2026-17044
Risk Score
Threat Entry
Updated 2026-07-23
Iptanus File Upload - Arbitrary File Upload (CVE-2025-15546)
The Iptanus File Upload WordPress plugin before 5.1.7 does not implement proper file handling when the duplicatepolicy setting is configured to "maintain both." Due to a Time-of-Check to Time-of-Use (TOCTOU) race condition between the file existence check and the actual file write operation, an authenticated attacker can overwrite files uploaded by other users.
PLUGIN
Iptanus File Upload
CVE-2025-15546
Risk Score