WordPress File Upload

Unauthenticated Path Traversal to Arbitrary File Read and Deletion in wfu_file_downloader.php vulnerability <= 4.24.11

Unauthenticated Stored CrossSite Scripting via SVG File Upload vulnerability <= 4.24.8

Unauthenticated Stored XSS vulnerability < 4.24.8

Reflected XSS vulnerability < 4.24.8

Broken Access Control + CSRF vulnerability <= 4.24.7