high8.6
CVE-2026-17044
The Iptanus File Upload WordPress plugin before 5.1.8 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to an SQL i…
Impact
The Iptanus File Upload WordPress plugin before 5.1.8 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to an SQL injection exploitable by unauthenticated users.
Affected products
| Product | Affected versions |
|---|---|
| Iptanus File Upload WordPress Plugin | before 5.1.8 |
Versions were read from the advisory text. No structured product data has been published for this record yet.