CVE-2024-39639

3.5 lowEPSS 0.3%

Low (3.5) in iptanus wordpress file upload. EPSS 0.3% chance of exploitation in the next 30 days.

Broken Access Control vulnerability in Nickolas Bossinas WordPress File Upload allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordPress File Upload: from n/a through 4.24.7.

Severity

CVSS 3.1

3.5 low

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 18% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2024-11-01
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

iptanus:wordpress_file_upload

References

https://patchstack.com/database/vulnerability/wp-file-upload/wordpress-wordpress-file-upload-plugin-4-24-7-broken-access-control-csrf-vulnerability?_s_id=cve

Check your stack JSON