Advisories · Technology

Nickboss WordPress File Upload.

Every CVE that names Nickboss WordPress File Upload among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-66570 CVE record

CVSS 7.1 High

WordPress WordPress File Upload plugin <= 5.2.1 - Cross Site Scripting (XSS) vulnerability
- Nickboss WordPress File Upload
- Cross-site scripting (XSS)
Not analysed yet 1 Nov 2026
CVE-2026-62071 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

WordPress WordPress File Upload plugin <= 5.1.10 - SQL Injection vulnerability
- nickboss WordPress File Upload
- SQL injection
Not analysed yet 1 Oct 2026
CVE-2026-66447 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

WordPress WordPress File Upload plugin <= 5.1.7 - SQL Injection vulnerability
- nickboss WordPress File Upload
- SQL injection
Not analysed yet 6 Aug 2026