Known Vulnerabilities for WordPress File Upload Pro by Unknown
Listed below are 10 of the newest known vulnerabilities associated with "WordPress File Upload Pro" by "Unknown".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-66447 json | Unauthenticated SQL Injection in WordPress File Upload <= 5.1.7 versions. | Not Provided | 2026-08-06 | 2026-08-06 |
| CVE-2026-65640 json | WordPress is vulnerable to a remote code execution vulnerability via malicious Postscript file upload by an Author level user... | Not Provided | 2026-08-17 | 2026-08-18 |
| CVE-2026-58480 json | Blocksy Companion Pro plugin for WordPress before 2.1.47 contains an unauthenticated arbitrary file upload vulnerability that... | Not Provided | 2026-07-08 | 2026-07-08 |
| CVE-2026-19728 json | The Extra Product Options Builder for WooCommerce WordPress plugin before 1.2.176 does not verify that the requester is entit... | Not Provided | 2026-08-16 | 2026-08-17 |
| CVE-2026-19697 json | The GutenKit WordPress plugin before 2.5.0 does not sanitise uploaded SVG files on all of the upload paths it enables, allow... | Not Provided | 2026-08-20 | 2026-08-20 |
| CVE-2026-19615 json | The Admin and Site Enhancements (ASE) WordPress plugin before 9.0.1 does not sanitise uploaded SVG files on every route it ac... | Not Provided | 2026-08-20 | 2026-08-20 |
| CVE-2026-19089 json | The Product Input Fields for WooCommerce WordPress plugin before 2.0.2 does not validate uploaded file types when its accepte... | Not Provided | 2026-08-10 | 2026-08-12 |
| CVE-2026-18781 json | The Drag and Drop Multiple File Upload for Contact Form 7 WordPress plugin before 1.3.9.9 does not validate the final name of... | Not Provided | 2026-08-21 | 2026-08-21 |
| CVE-2026-18438 json | The Templately – Elementor & Gutenberg Template Library: 6500+ Free & Pro Ready Templates And Cloud! plugin for WordPress i... | Not Provided | 2026-08-15 | 2026-08-17 |
| CVE-2026-18202 json | The JetEngine WordPress plugin before 3.8.14 adds SVG to the site-wide list of allowed upload types without sanitising the fi... | Not Provided | 2026-08-19 | 2026-08-19 |