16514 matches found
WordPress Hash Form plugin <= 1.4.2 - Arbitrary File Upload vulnerability
Arbitrary File Upload vulnerability discovered by CoryRoo in WordPress Plugin Hash Form versions = 1.4.2...
WordPress Squeeze plugin < 1.7.12 - Author+ Arbitrary File Upload vulnerability
Author+ Arbitrary File Upload vulnerability discovered by Ezekiel Victor in WordPress Plugin Squeeze versions 1.7.12...
WordPress Product Input Fields for WooCommerce plugin < 2.0.2 - Unauthenticated Arbitrary File Upload vulnerability
Unauthenticated Arbitrary File Upload vulnerability discovered by Farid Narimanov in WordPress Plugin Product Input Fields for WooCommerce versions 2.0.2...
EUVD-2026-67323
The storage endpoint /storage/upload of cjbi admin3 v3.0.0 are missing permission checks. /Any logged-in user can upload arbitrary files, and any anonymous attacker can download them...
CVE-2026-75339
The storage endpoint /storage/upload of cjbi admin3 v3.0.0 are missing permission checks. /Any logged-in user can upload arbitrary files, and any anonymous attacker can download them...
Exploit for CVE-2026-32475
CVE-2026-32475 — Elementor Pro ≤ 4.2.1 Unauthenticated Arbitra...
CVE-2023-4861-PoC
CVE-2023-4861 PoC Questo repository contiene una prova di concetto in Python per CVE-2023-4861 , un problema di esecuzione remota di codice autenticato nel plugin WordPress File Manager Pro - Filester. Riepilogo della vulnerabilità CVE: CVE-2023-4861 Prodotto: File Manager Pro - Filester filester...
WordPress Workeera plugin < 1.0.6 - Subscriber+ Arbitrary File Upload vulnerability
Subscriber+ Arbitrary File Upload vulnerability discovered by Erwan LR WPScan in WordPress Plugin Workeera versions 1.0.6...
CVE-2026-78274
Editor Arbitrary File Upload in Fluent Boards Pro = 2.0.11 versions...
CVE-2026-78274 WordPress Fluent Boards Pro plugin <= 2.0.11 - Arbitrary File Upload vulnerability
Editor Arbitrary File Upload in Fluent Boards Pro = 2.0.11 versions...
EUVD-2026-66937
Editor Arbitrary File Upload in Fluent Boards Pro = 2.0.11 versions...
CVE-2026-78274
CVE-2026-78274 affects the WordPress Fluent Boards Pro plugin in versions
CVE-2026-78274 WordPress Fluent Boards Pro plugin <= 2.0.11 - Arbitrary File Upload vulnerability
Editor Arbitrary File Upload in Fluent Boards Pro = 2.0.11 versions...
CVE-2026-77018
The Workeera WordPress plugin before 1.0.6 does not restrict which profile values a candidate may submit, nor validate the type of the file it subsequently writes into a publicly reachable directory, allowing users with a role as low as subscriber to upload arbitrary files and achieve remote code...
CVE-2026-77018 Workeera Remote Tech Job Board < 1.0.6 - Subscriber+ Arbitrary File Upload via Candidate Profile Mass Assignment
The Workeera WordPress plugin before 1.0.6 does not restrict which profile values a candidate may submit, nor validate the type of the file it subsequently writes into a publicly reachable directory, allowing users with a role as low as subscriber to upload arbitrary files and achieve remote code...
CVE-2026-75339
The storage endpoint /storage/upload of cjbi admin3 v3.0.0 are missing permission checks. /Any logged-in user can upload arbitrary files, and any anonymous attacker can download them...
CVE-2026-75339
The cjbi admin3 v3.0.0 software is vulnerable to a security flaw because the /storage/upload endpoint lacks proper permission checks. This oversight allows any logged-in user to upload arbitrary files to the system, while anonymous attackers can download these files. Direct exploit information or...
CVE-2026-75339
The storage endpoint /storage/upload of cjbi admin3 v3.0.0 are missing permission checks. /Any logged-in user can upload arbitrary files, and any anonymous attacker can download them...
CVE-2026-78274: Unrestricted Upload of File with Dangerous Type
Editor Arbitrary File Upload in Fluent Boards Pro = 2.0.11 versions...
PT-2026-82784
The storage endpoint /storage/upload of cjbi admin3 v3.0.0 are missing permission checks. /Any logged-in user can upload arbitrary files, and any anonymous attacker can download them...