PT-2025-38519

Name of the Vulnerable Software and Affected Versions Embed PDF for WPForms plugin for WordPress versions up to and including 1.1.5 Description The Embed PDF for WPForms plugin for WordPress is susceptible to arbitrary file uploads due to the absence of file type validation within the ajax handle...

WordPress plugin Responsive Filterable Portfolio 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. The WordPress Responsive Filterable Portfolio plugin has an arbitrary file upload vulnerability that stems from a lack of file type validation in the HdnMediaSelectionimage fiel...

CVE-2025-31100 WordPress School Management Plugin <= 1.93.1 (02-07-2025) - Arbitrary File Upload Vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Mojoomla School Management allows Upload a Web Shell to a Web Server.This issue affects School Management: from n/a through 1.93.1 02-07-2025...

CVE-2012-10049 WebPageTest Arbitrary PHP File Upload RCE

WebPageTest version 2.6 and earlier contains an arbitrary file upload vulnerability in the resultimage.php script. The application fails to validate or sanitize user-supplied input before saving uploaded files to a publicly accessible directory. This flaw allows remote attackers to upload and...

CVE-2012-10026

The WordPress plugin Asset-Manager version 2.0 and below contains an unauthenticated arbitrary file upload vulnerability in upload.php. The endpoint fails to properly validate and restrict uploaded file types, allowing remote attackers to upload malicious PHP scripts to a predictable temporary...

CVE-2025-0928

Summary: CVE-2025-0928 affects Juju prior to 3.6.8 and 2.9.52 where any authenticated controller user could upload arbitrary agent binaries to any model or the controller, without verifying model membership or explicit permissions, enabling distribution of poisoned binaries and potential remote c...

WordPress plugin Drag and Drop Multiple File Upload 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin Drag and Drop...

kkFileView 代码问题漏洞

kkFileView is Kaijing Technology kekingcn open source Spring-Boot based on a generic file online preview project . kkFileView 4.4.0 version of the code problem vulnerability , the vulnerability stems from the file/fileUpload in the parameter File of the wrong operation leads to arbitrary file...

WordPress WP Pro Real Estate 7 plugin <= 3.5.4 - Authenticated (Seller) Arbitrary File Upload vulnerability

Authenticated Seller Arbitrary File Upload vulnerability discovered by Foxyyy in WordPress Theme Real Estate 7 versions = 3.5.4...

WordPress Appointify plugin <= 1.0.8 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Tri Doan in WordPress Plugin Appointify versions = 1.0.8...

CVE-2024-10902 Arbitrary File Upload with Path Traversal in eosphoros-ai/db-gpt

In eosphoros-ai/db-gpt version v0.6.0, the web API POST /v1/personal/agent/upload is vulnerable to Arbitrary File Upload with Path Traversal. This vulnerability allows unauthorized attackers to upload arbitrary files to the victim's file system at any location. The impact of this vulnerability...

Quivr 安全漏洞

Quivr is an artificial intelligence application open-sourced by Quivr. A security vulnerability exists in Quivr that stems from a path traversal that allows an attacker to upload a file to an arbitrary path in an S3 bucket...

YznCMS 安全漏洞

YznCMS is a backend development framework open source by China ken678. A security vulnerability exists in YznCMS v2.0.1, the vulnerability stems from the existence of arbitrary file upload problem, an attacker can upload a well-designed Zip file to execute arbitrary code...

GHSA-WP68-XRFG-XVQ4 Cockpit Arbitrary File Upload

Versions of the package cockpit-hq/cockpit before 2.4.1 are vulnerable to Arbitrary File Upload where an attacker can use different extension to bypass the upload filter...

CVE-2024-11391

CVE-2024-11391 affects the WordPress plugin Advanced File Manager (

CVE-2024-52581

CVE-2024-52581 affects Litestar (ASGI framework). The vulnerability arises in the multipart/form-data parsing path prior to version 2.13.0, where the parser reads the entire request body into memory without a size limit, enabling unbounded memory consumption (DoS) on large uploads. The issue is t...

WordPress HB AUDIO GALLERY plugin <= 3.0 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Plugin HB AUDIO GALLERY versions = 3.0...

WordPress Verbalize WP plugin <= 1.0 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Plugin Verbalize WP versions = 1.0...

WordPress WP Dropbox Dropins plugin <= 1.0 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Plugin WP Dropbox Dropins versions = 1.0...

WordPress Creates 3D Flipbook, PDF Flipbook plugin <= 1.2 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Plugin Creates 3D Flipbook, PDF Flipbook versions = 1.2...