Unknown All in One Files Upload

2 known vulnerabilities in Unknown All in One Files Upload, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

CVE-2026-85576 CVSS 4.3 medium The All in One Files Upload WordPress plugin before 2.0.17 does not have any capability check, and does not verify the authenticity of the…
CVE-2026-85573 CVSS 8.8 high The All in One Files Upload WordPress plugin before 2.0.17 adds SVG to the site's allowed upload types and does not sanitise uploaded…