Filestack WP Upload

Filestack WP Upload has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Filestack WP Upload has a vendor fix available, so running the current release closes it.

All of these findings were reported by vgo0. Filestack WP Upload is installed on roughly 50 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.

Strategic Overview

Avg CVSSMedium
6.1/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Filestack WP Upload vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.1CVE-2024-11462

Filestack Official <= 2.1.0 - Reflected Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records
Showing 1–1 of 1 reports
Filestack WP Upload banner
Latestv3.1.0

Filestack WP Upload

filestack

Author

filestack

0.0(0)
0/100
Last Updated
2025-11-11 (10mo ago)
Active Installs
50+
Downloads
5,532
Requires WP
5.0+
Requires PHP
7.4+
Tested up to
WP 6.8.8
Created
2017-08-30 (9y ago)

With Filestack WordPress Upload, you or your users can upload files directly from local and cloud drives including Facebook, Instagram, Google Drive, Google Image Search, Google Photos, Dropbox, Box image URL, Webcam, Video Camera, and URL screenshots. Simply put the shortcode [Filestack] to call the file uploader and set the location where the uploaded file should appear. You can display the files and media assets immediately on your post or page. The integrated Filestack CDN optimizes for page load time to ensure high performance. You or your users can crop or edit the image or file within the file uploader, or you can use file transformations to crop, resize, compress, tag, filter, border, or more file transformations to programmatically optimize the images and media assets. You can store assets conveniently with Filestack or in your own cloud storage location, including Amazon S3, Microsoft Azure, Dropbox, Rackspace and Google Cloud Storage. Filestack WordPress Upload Features: Upload integrations with Facebook, Instagram, Google Drive, Google Image Search, Google Photos, Dropbox, Box image URL, Webcam, Video Camera, and URL screenshots Multi-file upload support Large file upload up to 200MB (configurable) In-app image transformations: crop, circle crop, and rotate Asynchronous uploads Integrated CDN for fast delivery Cloud storage integrations with Amazon S3, Microsoft Azure, Dropbox, Rackspace, and Google Cloud Storage Links https://www.filestack.com https://www.filestack.com/docs/javascript-api/pick-v3 Free API Key Languages English: &#8216;en’ Chinese: &#8216;zh’ Danish: &#8216;da’ Dutch: &#8216;nl’ French: &#8216;fr’ German: &#8216;de’ Hebrew: &#8216;he’ Italian: &#8216;it’ Japanese: &#8216;ja’ Polish: &#8216;pl’ Portuguese: &#8216;pt’ Russian: &#8216;ru’ Spanish: &#8216;es’ Questions You can contact Support at support@filestack.com and send general questions to hello@filestack.com. We love hearing from you!

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C