Nickboss vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Nickboss products: 2 record(s), with severity, exploitation and fixes.

WordPress File Upload 2

Exploited only (KEV) →

CVE-2026-62071 Critical · 9.3 CWE-89 Oct 1, 2026

WordPress WordPress File Upload plugin <= 5.1.10 - SQL Injection vulnerability

Unauthenticated SQL Injection in WordPress File Upload <= 5.1.10 versions.

CVE-2026-66447 Critical · 9.3 CWE-89 Aug 6, 2026

WordPress WordPress File Upload plugin <= 5.1.7 - SQL Injection vulnerability

Unauthenticated SQL Injection in WordPress File Upload <= 5.1.7 versions.