Known vulnerabilities in the Wordpress File Upload plugin

19 security advisories have been published for the Wordpress File Upload plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.

WordPress File Upload - SQL Injection (CVE-2026-66447) CRITICAL 2026-08-06
Wordpress File Upload - Arbitrary File Upload (CVE-2024-13494) MEDIUM 2025-02-25
Wordpress File Upload - Arbitrary File Upload (CVE-2024-9939) HIGH 2025-01-08
Wordpress File Upload - Remote Code Execution (CVE-2024-11635) CRITICAL 2025-01-08
Wordpress File Upload - Remote Code Execution (CVE-2024-11613) CRITICAL 2025-01-08
Wordpress File Upload - Arbitrary File Upload (CVE-2024-12719) MEDIUM 2025-01-07
Wordpress File Upload - Arbitrary File Upload (CVE-2024-39639) MEDIUM 2024-11-01
Wordpress File Upload - Arbitrary File Upload (CVE-2024-9047) CRITICAL 2024-10-12
Wordpress File Upload - Arbitrary File Upload (CVE-2024-7301) HIGH 2024-08-16
Wordpress File Upload - Arbitrary File Upload (CVE-2024-6494) MEDIUM 2024-08-07
Wordpress File Upload - Arbitrary File Upload (CVE-2024-6651) MEDIUM 2024-08-06
Wordpress File Upload - Arbitrary File Upload (CVE-2024-5852) MEDIUM 2024-07-16
Wordpress File Upload - Arbitrary File Upload (CVE-2024-2847) MEDIUM 2024-04-09
Wordpress File Upload - Arbitrary File Upload (CVE-2023-4811) MEDIUM 2023-10-16
Wordpress File Upload - Arbitrary File Upload (CVE-2023-2688) MEDIUM 2023-06-09
Wordpress File Upload - Arbitrary File Upload (CVE-2023-2767) MEDIUM 2023-06-09
Wordpress File Upload - Remote Code Execution (CVE-2021-24962) HIGH 2022-03-28
Wordpress File Upload - Arbitrary File Upload (CVE-2021-24961) MEDIUM 2022-03-07
Wordpress File Upload - Arbitrary File Upload (CVE-2021-24960) MEDIUM 2022-03-07

Browse the full threat database

WordPress security that blocks attacks before they land.

sales@hackhalt.com

© Hack Halt Inc. All rights reserved.