CVE-2025-1754 Missing Authentication for Critical Function in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions from 17.2 before 17.11.5, 18.0 before 18.0.3, and 18.1 before 18.1.1 that could have allowed unauthenticated attackers to upload arbitrary files to public projects by sending crafted API requests, potentially leading to resource...

CVE-2021-4457 ZoomSounds < 6.05 - Unauthenticated Arbitrary File Upload

The ZoomSounds plugin before 6.05 contains a PHP file allowing unauthenticated users to upload an arbitrary file anywhere on the web server...

WordPress Drop Uploader for CF7 - Drag&Drop File Uploader Addon Plugin <= 2.4.1 - Arbitrary File Upload Vulnerability

WordPress Drop Uploader for CF7 - Drag&Drop File Uploader Addon Plugin = 2.4.1 - Arbitrary File Upload Vulnerability discovered by 0xd4rk5id3 in WordPress Plugin Drop Uploader for CF7 - Drag&Drop File Uploader Addon versions = 2.4.1...

CVE-2025-6206

The Aiomatic - Automatic AI Content Writer & Editor, GPT-3 & GPT-4, ChatGPT ChatBot & AI Toolkit plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'aiomaticimageeditorajaxsubmit' function in all versions up to, and including, 2.5.0. This makes...

CVE-2025-6206

CVE-2025-6206 concerns the WordPress plugin Aiomatic - AI Content Writer & Editor (versions up to 2.5.0). The issue is an arbitrary file upload flaw caused by missing file-type validation in the aiomatic_image_editor_ajax_submit function. It requires an authenticated user with Subscriber+ privile...

PT-2025-26671

Name of the Vulnerable Software and Affected Versions: Zhiyuan OA versions 5.0 Zhiyuan OA versions 5.1 through 5.6sp1 Zhiyuan OA versions 6.0 through 6.1sp2 Zhiyuan OA version 7.0 Zhiyuan OA versions 7.0sp1 through 7.1 Zhiyuan OA version 7.1sp1 Zhiyuan OA versions 8.0 through 8.0sp2 Description: ...

CVE-2025-23092

Mitel OpenScape Accounting Management through V5 R1.1.0 could allow an authenticated attacker with administrative privileges to conduct a path traversal attack due to insufficient sanitization of user input. A successful exploit could allow an attacker to upload arbitrary files and execute...

WordPress Aiomatic plugin <= 2.5.0 - Authenticated (Subscriber+) Arbitrary File Upload vulnerability

Authenticated Subscriber+ Arbitrary File Upload vulnerability discovered by khanhhnahk1 in WordPress Plugin Aiomatic versions = 2.5.0...

WordPress Drag and Drop Multiple File Upload (Pro) - WooCommerce plugin <= 5.0.6 - Arbitrary File Upload Vulnerability

WordPress Drag and Drop Multiple File Upload Pro - WooCommerce plugin = 5.0.6 - Arbitrary File Upload Vulnerability discovered by Bonds in WordPress Plugin Drag and Drop Multiple File Upload Pro - WooCommerce versions = 5.0.6...

CVE-2025-6086

The CSV Me plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'csvmeoptionspage' function in all versions up to, and including, 2.0. This makes it possible for authenticated attackers, with Administrator-level access and above, to upload...

CVE-2025-4102

The Beaver Builder Plugin Starter Version plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'saveenabledicons' function in all versions up to, and including, 2.9.1. This makes it possible for authenticated attackers, with Administrator-level...

CVE-2025-6220

The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'saveoptions' function in all versions up to, and including, 3.5.12. This makes it possible for authenticated attackers, with Administrator-level access and...

CVE-2025-4413

The Pixabay Images plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the pixabayupload function in all versions up to, and including, 3.4. This makes it possible for authenticated attackers, with Author-level access and above, to upload arbitrary...

VulnCheck KEV: CVE-2025-34040

An arbitrary file upload vulnerability exists in the Zhiyuan OA platform via the wpsAssistServlet interface. The realFileType and fileId parameters are improperly validated during multipart file uploads, allowing unauthenticated attackers to upload crafted JSP files outside of intended...

Exploit for Unrestricted Upload of File with Dangerous Type in Laravel-Admin

CVE-2023-24249 PoC CVE-2023-24249https://nvd.nist.gov/vuln/...

CVE-2025-4102

The Beaver Builder Plugin Starter Version plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'saveenabledicons' function in all versions up to, and including, 2.9.1. This makes it possible for authenticated attackers, with Administrator-level...

Arbitrary File Upload

Overview hipdevteam/bb-plugin is a Fork of BB Plugin Pro for use with composer Affected versions of this package are vulnerable to Arbitrary File Upload via the saveenabledicons function. An attacker can upload arbitrary files to the server by bypassing file type validation, which may allow...

CVE-2025-4102 Beaver Builder Plugin (Starter Version) <= 2.9.1 - Authenticated (Administrator+) Arbitrary File Upload

The Beaver Builder Plugin Starter Version plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'saveenabledicons' function in all versions up to, and including, 2.9.1. This makes it possible for authenticated attackers, with Administrator-level...

CVE-2025-4102

The Beaver Builder Plugin (Starter Version) for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the save_enabled_icons function in all versions up to and including 2.9.1. An authenticated attacker with Administrator-level access can upload arbitrary files ...

CVE-2025-4102 Beaver Builder Plugin (Starter Version) <= 2.9.1 - Authenticated (Administrator+) Arbitrary File Upload

The Beaver Builder Plugin Starter Version plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'saveenabledicons' function in all versions up to, and including, 2.9.1. This makes it possible for authenticated attackers, with Administrator-level...