Exploit for CVE-2023-29386

PoC exploit for CVE-2023-29386, an unauthenticated arbitrary fil...

CVE-2023-29386

creationtimestamp| type| source ---|---|--- 2025-10-10 10:33:22+00:00| seen| https://sploitus.com/exploit?id=F53B330C-8CC3-5DA6-A737-F46C6D0EAE5C&utmsource=rss&utmmedium=rss 2025-10-10 15:00:15+00:00| published-proof-of-concept| Telegram/lsV5zC9p1X8tVLf-isAoIZe5cgJDfa3OMyAiSazDCtlTQGM 2025-10-10...

CVE-2023-29386

Unrestricted Upload of File with Dangerous Type vulnerability in Julien Crego Manager for Icomoon.This issue affects Manager for Icomoon: from n/a through 2.0...

CVE-2023-29386

CVE-2023-29386 concerns the WordPress WordPress Manager for Icomoon plugin (<=2.0). An unauthenticated, unrestricted upload of files with dangerous types via the plugin’s upload endpoint enables arbitrary file upload. Technical details in connected docs show an exploit exists (PoC in a GitHub ...

CVE-2023-29386 WordPress Manager for Icomoon plugin <= 2.0 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Julien Crego Manager for Icomoon.This issue affects Manager for Icomoon: from n/a through 2.0...

WordPress Manager for Icomoon Plugin <= 2.0 is vulnerable to Arbitrary File Upload

Software Manager for Icomoon Type Plugin Vulnerable versions = 2.0 Fixed in 2.1 OWASP Top 10 A1: Injection Classification Arbitrary File Upload CVE CVE-2023-29386 Patch priority Low CVSS severity Low 9.1 Developer Claim ownership PSID 0add1822a9fe Credits deokhunKim Required privilege Administrat...