5510 matches found
WordPress Plugin Drag and Drop Multiple File Upload for WooCommerce Code Issue Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists i...
Unrestricted file upload
Unrestricted Upload of File with Dangerous Type vulnerability in HM Plugin WordPress Job Board and Recruitment Plugin – JobWP.This issue affects WordPress Job Board and Recruitment Plugin – JobWP: from n/a through 2.0...
Remote code execution
The Export any WordPress data to XML/CSV WordPress plugin before 1.4.0, WP All Export Pro WordPress plugin before 1.8.6 does not check nonce tokens early enough in the request lifecycle, allowing attackers with the ability to upload files to make logged in users perform unwanted actions leading t...
CVE-2023-48376
SmartStar Software CWS is a web-based integration platform, its file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability to upload arbitrary files to perform arbitrary command or disrupt service...
CVE-2023-48371
ITPison OMICARD EDM’s file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability to upload and run arbitrary executable files to perform arbitrary system commands or disrupt service...
SmartStar Software CWS Code Issue Vulnerability
SmartStar Software CWS is a Web-based integration platform from China-based SmartStar Software. A code issue vulnerability exists in SmartStar Software CWS v10.25, which stems from the file upload feature not restricting the upload of dangerous types of files, which can be exploited by remote...
Kaifa Technology WebITR Security Breach
Kaifa Technology Kaifa Technology WebITR is an online time and attendance system from China's Kaifa Technology Corporation. A security vulnerability exists in Kaifa Technology WebITR version 21023, which originates from the file upload feature not restricting the upload of dangerous types of file...
Design/Logic Flaw
An arbitrary file upload vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-write administrator with access to the web interface to disrupt system processes and potentially execute arbitrary code with limited privileges on the firewall...
Palo Alto Networks PAN-OS Security Vulnerability
Palo Alto Networks PAN-OS is a next-generation firewall software from Palo Alto Networks, USA. A security vulnerability exists in Palo Alto Networks PAN-OS that stems from the presence of an arbitrary file upload vulnerability. The following products and versions are affected: Palo Alto Networks...
PT-2023-31604 · Unknown · Cute Http File Server
Name of the Vulnerable Software and Affected Versions: CuteHttpFileServer versions 1.0 through 2.0 Description: A Cross Site Scripting XSS issue allows attackers to obtain sensitive information via the file upload function on the home page. Recommendations: For CuteHttpFileServer versions 1.0 and...
Privilege escalation
An arbitrary file upload vulnerability in DoraCMS v2.1.8 allow attackers to execute arbitrary code via uploading a crafted HTML or image file to the user avatar...
PSA: High Severity File Upload Vulnerability in Elementor Patched
On December 6, 2023, the Wordfence team noticed a changelog entry for version 3.18.1 of Elementor, a WordPress plugin installed on nearly 9 million sites. We did not discover the original vulnerability and only became aware of it after reviewing the changelog containing a partial patch. We...
Kopage Website Builder 4.4.15 Shell Upload
Title: Kopage-Website-Builder-4.4.15-File-Upload-RCE Author: nu11secur1ty Date: 12/08/2023 Vendor: https://www.kopage.com/ Software: https://demo.kopage.com/index.php Reference: https://portswigger.net/web-security/file-upload,...
CVE-2023-48930
xinhu xinhuoa 2.2.1 contains a File upload vulnerability...
CVE-2023-48930
xinhu xinhuoa 2.2.1 contains a File upload vulnerability...
CVE-2023-48930
xinhu xinhuoa 2.2.1 contains a File upload vulnerability...
PT-2023-31014 · Unknown · Xinhu Xinhuoa
Name of the Vulnerable Software and Affected Versions: xinhu xinhuoa version 2.2.1 Description: The issue is related to a File upload vulnerability. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was...
Cross site request forgery (csrf)
The Welcart e-Commerce WordPress plugin before 2.9.5 does not validate files to be uploaded, as well as does not have authorisation and CSRF in an AJAX action handling such upload. As a result, any authenticated users, such as subscriber could upload arbitrary files, such as PHP on the server...
