{
 "id": "WPSEC-2026-1124",
 "url": "https://wpsec.com/vuln/WPSEC-2026-1124/",
 "json_url": "https://wpsec.com/vuln/WPSEC-2026-1124/advisory.json",
 "markdown_url": "https://wpsec.com/vuln/WPSEC-2026-1124/index.md",
 "title": "Iptanus File Upload <= 5.2.0 - Unauthenticated Information Exposure via 'params_index' Parameter",
 "description": "The Iptanus File Upload plugin for WordPress is vulnerable to Sensitive Information Exposure via the 'params_index' parameter of the upload AJAX handler in all versions up to, and including, 5.2.0. This is due to the request-supplied value being placed unescaped into a regular expression when the stored upload form parameter index is looked up, combined with the 'User failed!' error response that returns the matched index entry regardless of debug mode. This makes it possible for unauthenticated attackers to make the lookup match index entries that belong to other users and read the usernames of users who have loaded an upload form, such as administrators. The entries also include the page and shortcode identifiers.",
 "plugin": {
  "slug": "wp-file-upload",
  "name": "Iptanus File Upload",
  "full_name": "Iptanus File Upload",
  "wordpress_org": "https://wordpress.org/plugins/wp-file-upload/",
  "advisories_url": "https://wpsec.com/vuln/plugin/wp-file-upload/",
  "attacksurface": "https://attacksurface.wpsec.com/plugin/wp-file-upload"
 },
 "type": "SENSITIVE DATA DISCLOSURE",
 "cwe": [
  "CWE-200"
 ],
 "cve": [],
 "cvss": {
  "version": "3.1",
  "score": 5.3,
  "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
  "severity": "Medium"
 },
 "affected": {
  "ranges": [
   {
    "from": null,
    "from_inclusive": true,
    "to": "5.2.1",
    "to_inclusive": false
   }
  ],
  "text": [
   "all versions before 5.2.1"
  ]
 },
 "introduced_in": null,
 "fixed_in": "5.2.1",
 "remediation": "Update to 5.2.1 or later.",
 "fix_released": "2026-10-15T17:55:18+00:00",
 "published": "2026-10-16T18:43:17+00:00",
 "updated": "2026-10-16T09:50:21.550113+00:00",
 "also_published_as": null,
 "references": [
  "https://wpsec.com/vuln/WPSEC-2026-1124/",
  "https://plugins.svn.wordpress.org/wp-file-upload/tags/5.2.1/",
  "https://wordpress.org/plugins/wp-file-upload/"
 ],
 "attacksurface_url": "https://attacksurface.wpsec.com/plugin/wp-file-upload",
 "source": "WPSec",
 "license": {
  "name": "CC BY 4.0",
  "url": "https://creativecommons.org/licenses/by/4.0/"
 },
 "usage": {
  "plugin": "Medium",
  "affected_versions": "Low",
  "as_of": "2026-10-16"
 }
}