CVE-2025-62050

CVE-2025-62050 affects the WordPress Blogmatic theme (versions up to 1.0.3). It is an Unrestricted Upload of File with Dangerous Type vulnerability that can be triggered by an authenticated Subscriber+. The issue has been publicly documented and a patch is available; remediation is to upgrade Blo...

CVE-2025-62056

CVE-2025-62056 concerns the WordPress theme News Event (blazethemes) where an Unrestricted Upload of File with Dangerous Type exists in the News Event component. Affected versions are News Event: from n/a through <= 1.0.1, with a reported CVSS v3.1 base score of 9.9 (CRITICAL) and network atta...

CVE-2025-62056 WordPress News Event theme <= 1.0.1 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in blazethemes News Event news-event.This issue affects News Event: from n/a through = 1.0.1...

CVE-2025-62050 WordPress Blogmatic theme <= 1.0.3 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in blazethemes Blogmatic blogmatic.This issue affects Blogmatic: from n/a through = 1.0.3...

CVE-2025-62056 WordPress News Event theme <= 1.0.1 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in blazethemes News Event news-event.This issue affects News Event: from n/a through = 1.0.1...

CVE-2025-62050 WordPress Blogmatic theme <= 1.0.3 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in blazethemes Blogmatic blogmatic.This issue affects Blogmatic: from n/a through = 1.0.3...

CVE-2025-50002

CVE-2025-50002 refers to an Unrestricted Upload of File with Dangerous Type in the WordPress Energia theme (Energia &lt;= 1.1.2), enabling an attacker to upload a Web Shell to the server. The issue is described as affecting Energia versions from n/a through 1.1.2, with a high-severity impact usin...

CVE-2025-50002 WordPress Energia theme <= 1.1.2 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Farost Energia energia allows Upload a Web Shell to a Web Server.This issue affects Energia: from n/a through = 1.1.2...

CVE-2025-50002 WordPress Energia theme <= 1.1.2 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Farost Energia energia allows Upload a Web Shell to a Web Server.This issue affects Energia: from n/a through = 1.1.2...

CVE-2025-10856 Arbitrary File Upload in Solvera Software's Teknoera

Unrestricted Upload of File with Dangerous Type vulnerability in Solvera Software Services Trade Inc. Teknoera allows File Content Injection. This issue affects Teknoera: through 01102025...

CVE-2025-10856 Arbitrary File Upload in Solvera Software's Teknoera

Unrestricted Upload of File with Dangerous Type vulnerability in Solvera Software Services Trade Inc. Teknoera allows File Content Injection. This issue affects Teknoera: through 01102025...

CVE-2025-10856

CVE-2025-10856 concerns Teknoera (Solvera Software Services Trade Inc.). Public records describe an Unrestricted Upload of File with Dangerous Type vulnerability that enables File Content Injection in Teknoera up to version/date 01102025. The CVSS 3.1 base metrics indicate a HIGH severity (8.1), ...

CVE-2025-67684

Quick.Cart is vulnerable to Local File Inclusion and Path Traversal issues in the theme selection mechanism. Quick.Cart allows a privileged user to upload arbitrary file contents while only validating the filename extension. This allows an attacker to include and execute uploaded PHP code,...

CVE-2026-1331

MeetingHub developed by HAMASTAR Technology has an Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

CVE-2026-1331 AMASTAR Technology｜MeetingHub - Arbitrary File Upload

MeetingHub developed by HAMASTAR Technology has an Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

CVE-2026-1331 AMASTAR Technology｜MeetingHub - Arbitrary File Upload

MeetingHub developed by HAMASTAR Technology has an Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

CVE-2026-1331

CVE-2026-1331 reports an Arbitrary File Upload in MeetingHub (HAMASTAR Technology). Public details across sources indicate unauthenticated remote attackers can upload and execute web shell backdoors, enabling arbitrary code execution on the server. Technical specifics include an upload handler (e...

CVE-2026-1331

MeetingHub developed by HAMASTAR Technology has an Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

HAMASTAR MeetingHub code-related vulnerabilities

HAMASTAR MeetingHub is a paperless conference system developed by HAMASTAR, a company from Taiwan, China. HAMASTAR MeetingHub has code-related vulnerabilities. These vulnerabilities stem from an arbitrary file upload vulnerability, which may allow unverified remote attackers to upload and execute...

CVE-2026-1331: Unrestricted Upload of File with Dangerous Type

MeetingHub developed by HAMASTAR Technology has an Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...