Known Vulnerabilities for WordPress File Upload by Nickboss
Listed below are 10 of the newest known vulnerabilities associated with "WordPress File Upload" by "Nickboss".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-123460 json | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nickboss WordPress File... | Not Provided | 2026-11-09 | 2026-11-09 |
| CVE-2026-122041 json | The Checkout Field Editor for WooCommerce (Pro) plugin for WordPress is vulnerable to unauthorized deletion of arbitrary atta... | Not Provided | 2026-11-07 | 2026-11-07 |
| CVE-2026-118235 json | The SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications plugin for WordPress is vulnerable to... | Not Provided | 2026-10-31 | 2026-11-02 |
| CVE-2026-118067 json | The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Stored Cro... | Not Provided | 2026-11-07 | 2026-11-07 |
| CVE-2026-115346 json | The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to Arbitrary File Upload in version... | Not Provided | 2026-10-30 | 2026-10-30 |
| CVE-2026-115243 json | The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.137 does not validate the extension of the file it ac... | Not Provided | 2026-11-04 | 2026-11-04 |
| CVE-2026-115212 json | The mView 豆瓣电影 WordPress plugin through 1.0.3 does not validate the type, name, or source of a remotely fetched file,... | Not Provided | 2026-11-09 | 2026-11-09 |
| CVE-2026-114432 json | The Contact Form 7 WordPress plugin before 6.2.4 does not validate the type or extension of files uploaded through a form fil... | Not Provided | 2026-11-08 | 2026-11-08 |
| CVE-2026-114431 json | The Enable Media Replace WordPress plugin before 4.2.3 does not pass a replaced media file through the WordPress upload pipel... | Not Provided | 2026-11-04 | 2026-11-04 |
| CVE-2026-114422 json | The Enable Media Replace WordPress plugin before 4.2.3 does not restrict the classes allowed when deserializing stored metada... | Not Provided | 2026-10-30 | 2026-10-30 |