CVE-2026-4808 Gerador de Certificados – DevApps <= 1.3.6 - Authenticated (Administrator+) Arbitrary File Upload

The Gerador de Certificados – DevApps plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the moveUploadedFile function in all versions up to, and including, 1.3.6. This makes it possible for authenticated attackers, with Administrator-level access...

CVE-2026-4808 Gerador de Certificados – DevApps <= 1.3.6 - Authenticated (Administrator+) Arbitrary File Upload

The Gerador de Certificados – DevApps plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the moveUploadedFile function in all versions up to, and including, 1.3.6. This makes it possible for authenticated attackers, with Administrator-level access...

CVE-2026-4808

CVE-2026-4808 affects the WordPress plugin “Gerador de Certificados – DevApps.” All versions up to 1.3.6 are vulnerable due to missing file type validation in moveUploadedFile(), enabling authenticated attackers with Administrator-level access to upload arbitrary files to the server and potential...

CVE-2026-4808: Unrestricted Upload of File with Dangerous Type

The Gerador de Certificados – DevApps plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the moveUploadedFile function in all versions up to, and including, 1.3.6. This makes it possible for authenticated attackers, with Administrator-level access...

WordPress Plugin Gerador de Certificados – DevApps Code Issues and Vulnerabilities

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There we...

WordPress Gerador de Certificados - DevApps plugin <= 1.3.6 - Authenticated (Administrator+) Arbitrary File Upload vulnerability

WordPress Gerador de Certificados - DevApps plugin = 1.3.6 - Authenticated Administrator+ Arbitrary File Upload vulnerability discovered by Legion Hunter in WordPress Plugin Gerador de Certificados – DevApps versions = 1.3.6...

Malicious code in devapps (npm)

The package devapps was found to contain malicious code...

MAL-2025-18347 Malicious code in devapps (npm)

The package devapps was found to contain malicious code...

bi-etl (1.0.5), devapps (2021.5.10) +7 more potentially affected by CVE-2023-41419 via gevent (20.12.1)

gevent PYPI version 20.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on gevent and may be impacted: - bi-etl 1.0.5 - devapps 2021.5.10 - easi-py-common =0.0.1a1, =0.5.0, =1.2.14, =0.26.3.post1, =0.2.3, =0.2.2, =0.2.4 Source cves: CVE-2023-41419...

bi-etl (1.0.5), devapps (2021.5.10) +7 more potentially affected by CVE-2023-41419 via gevent (20.12.1)

gevent PYPI version 20.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on gevent and may be impacted: - bi-etl 1.0.5 - devapps 2021.5.10 - easi-py-common =0.0.1a1, =0.5.0, =1.2.14, =0.26.3.post1, =0.2.3, =0.2.2, =0.2.4 Source cves: CVE-2023-41419...