5547 matches found
CVE-2025-39538
Unrestricted Upload of File with Dangerous Type vulnerability in Mathieu Chartier WP-Advanced-Search wp-advanced-search allows Upload a Web Shell to a Web Server.This issue affects WP-Advanced-Search: from n/a through = 3.3.9.4...
CVE-2025-32652
Unrestricted Upload of File with Dangerous Type vulnerability in solacewp Solace Extra solace-extra allows Using Malicious Files.This issue affects Solace Extra: from n/a through = 1.3.1...
CVE-2025-32682
Unrestricted Upload of File with Dangerous Type vulnerability in RomanCode MapSVG mapsvg-lite-interactive-vector-maps allows Upload a Web Shell to a Web Server.This issue affects MapSVG: from n/a through = 8.6.4...
CVE-2025-32660
Unrestricted Upload of File with Dangerous Type vulnerability in JoomSky JS Job Manager js-jobs allows Upload a Web Shell to a Web Server.This issue affects JS Job Manager: from n/a through = 2.0.2...
SUSE CVE-2017-13670
In BlackCat CMS 1.2, remote authenticated users can upload any file via the media upload function in backend/media/ajaxupload.php, as demonstrated by a ZIP archive that contains a .php file...
SAP NetWeaver Visual Composer Metadata Uploader File Upload Vulnerability
SAP NetWeaver Visual Composer Metadata Uploader is a tool for modeling assistance from SAP. A file upload vulnerability exists in SAP NetWeaver Visual Composer Metadata Uploader. The vulnerability is due to an unauthenticated agent uploading potentially malicious executable binaries because the...
CVE-2025-46616
Quantum StorNext Web GUI API before 7.2.4 allows potential Arbitrary Remote Code Execution RCE via upload of a file. This affects StorNext RYO before 7.2.4, StorNext Xcellis Workflow Director before 7.2.4, and ActiveScale Cold Storage...
CVE-2022-44760 HCL Leap is affected by an unrestricted upload of file with dangerous type vulnerability
Unsafe default file type filter policy in HCL Leap allows execution of unsafe JavaScript in deployed applications...
CVE-2025-46264
CVE-2025-46264 (PowerPress Podcasting) is an Unrestricted Upload of Dangerous File vulnerability in the WordPress PowerPress Podcasting plugin. Affected: PowerPress Podcasting, versions up to 11.12.5. Impact: attacker can upload a web shell to the web server, enabling arbitrary file upload and po...
CVE-2025-2579
CVE-2025-2579 (Lottie Player for WordPress) : The plugin versions up to 1.1.8 are vulnerable to Stored Cross-Site Scripting via file uploads due to insufficient input sanitization/output escaping. Exploitation requires authenticated access at Author level or higher, enabling injection of scripts ...
CVE-2025-2543 Advanced Accordion Gutenberg Block <= 5.0.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
The Advanced Accordion Gutenberg Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 5.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-lev...
CVE-2024-40445
A directory traversal vulnerability in forkosh Mime TeX before version 1.77 allows attackers on Windows systems to read or append arbitrary files by manipulating crafted input paths...
CVE-2025-3519 Replace uploaded files knowing the file upload ID
An authorization bypass in Unblu Spark allows a participant of a conversation to replace an existing, uploaded file. Every uploaded file in Unblu gets assigned with a randomly generated Universally Unique ID UUID. In case a participant of this or another conversation gets access to such a file ID...
CVE-2025-43946
TCPWave DDI version 11.34P1C2 is vulnerable to Remote Code Execution (RCE) . This security flaw arises from a combination of Unrestricted File Upload and Path Traversal vulnerabilities. An attacker could exploit these weaknesses to execute malicious code on the system. As a mitigation, it is reco...
CVE-2023-43958
An arbitrary file upload vulnerability in the component /jquery-file-upload/server/php/index.php of Hospital Management System v4.0 allows an unauthenticated attacker to upload any file to the server and execute arbitrary code...
PT-2025-17490 · Unblu · Unblu Spark +1
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A user can upload a file to a conversation even if the file upload functionality is disabled. The system allows file uploads through direct API requests, despite the functionality being...
PT-2025-17473 · WordPress · The Greenshift
Name of the Vulnerable Software and Affected Versions: Greenshift – animation and page builder blocks plugin for WordPress versions 11.4 through 11.4.5 Description: The Greenshift plugin is vulnerable to arbitrary file uploads due to missing file type validation in the gspb make proxy api request...
Exploit for CVE-2025-39436
🚨 WordPress Plugin Exploit: CVE-2025-39436 📝 Description A...
CVE-2021-4455
The CVE-2021-4455 entry concerns the WordPress plugin Smart Product Review. It is vulnerable in all versions up to and including 1.0.4 due to missing file type validation, allowing unauthenticated attackers to upload arbitrary files to the affected site and potentially achieve remote code executi...