CVE-2024-39639

LOW 3.5CVE-2024-39639 · Published 01/11/2024 · updated 17/06/2026

Package	Affected versions	Patched versions
wordpress file upload iptanus	`< 4.24.8`	`4.24.8`

Description

Broken Access Control vulnerability in Nickolas Bossinas WordPress File Upload allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordPress File Upload: from n/a through 4.24.7.

References

patchstack.com/database/vulnerability/wp-file-upload/wordpress-wordpress-file-upload-plugin-4-24-7-broken-access-control-csrf-vulnerability · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free