Radar sectionsPlugins & themes
Check my site

WordPress plugin

Iptanus File Upload security & vulnerabilities

wp-file-upload— active installsLast vulnerability Nov 7, 2026

No known unpatched vulnerabilities in the latest version

All 36 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.

36Known vulnerabilities
  • Critical8
  • High9
  • Medium19
  • Low0
Vulnerabilities per year
2014: 2 vulnerabilities2142015: 4 vulnerabilities4152016: 1 vulnerability1162018: 2 vulnerabilities2182020: 1 vulnerability1202022: 4 vulnerabilities4222023: 4 vulnerabilities4232024: 7 vulnerabilities7242025: 5 vulnerabilities5252026: 6 vulnerabilities626

All Iptanus File Upload vulnerabilities

Nothing in this view

No vulnerabilities match this filter. Show all.

Iptanus File Upload: common questions

Does Iptanus File Upload have known vulnerabilities?

Yes. VulnCrest Radar lists 36 known vulnerabilities in Iptanus File Upload: 8 critical, 9 high, 19 medium. None are known to affect version null.

How do I check which version of Iptanus File Upload I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent Iptanus File Upload vulnerability?

CVE-2026-123460, published Nov 7, 2026: Iptanus File Upload <= 5.2.2 - Unauthenticated Stored Cross-Site Scripting. Severity: High (CVSS 7.2).

Is any Iptanus File Upload vulnerability listed in CISA KEV?

No. None of the known Iptanus File Upload vulnerabilities is currently listed in the CISA KEV catalog.

Search VulnCrest Radar

Are you sure?