CVE-2023-47129

CVE-2023-47129 - Statamic CMS 버전 " image.jpg 4 이 파일의 이름을 image.php로 변경합니다. 5 양식 페이지에서 생성한 image.php 파일을 업로드합니다. 6 이제 이 파일을 실행하려면 https://yoursite.com/assets/image.php에 접속하면 됩니다. 참고:https://yoursite.com을 테스트 설치 주소로 바꾸세요. 참조 GHSA-72hg-5wr5-rmfc...

sudowp-postgallery

SudoWP PostGallery 보안 포크 기여자: SudoWP, WP Republic 원저자: RTO GmbH 태그: 갤러리, 보안, 패치됨, cve-2025-13543 최소 요구 버전: 5.8 테스트 완료 버전: 6.7 안정 버전: 1.12.6 라이선스: GPLv2 이상 보안 공지 이 플러그인은 중단된 "PostGallery" 플러그인의 보안 강화 포크 입니다. 원본 플러그인은 심각한 보안 취약점으로 인해 2025년 12월 2일 WordPress.org에서 폐쇄되었습니다. 원본 플러그인 링크:...

CVE-2025-2005

WordPress FEUP 임의 파일 업로드 익스플로잇 CVE-2025-2005 이 저장소는 등록 양식에 MIME/파일 형식 검증이 없어 임의 파일 업로드에 취약한 WordPress Front End Users 플러그인3.2.32까지에 대한 PoCProof of Concept 익스플로잇을 제공합니다. 이를 통해 인증되지 않은 공격자가 악성 파일예: 웹 셸을 업로드하여 서버에서 원격 코드 실행RCE으로 이어질 수 있습니다. 기능 CVE-2025-2005: WordPress Front End Users 플러그인 파일 업로드 취약점...

CVE-2025-54962

🔥 CVE-2025-54962 — Небезопасная загрузка файлов в веб-сервере OpenPLC Runtime OpenPLC Runtime ≤ 2024-12-31 — Хранимый XSS, CSRF 📌 Краткое описание Я обнаружил уязвимость в веб-сервере OpenPLC Runtime выпуск от 2024-12-31, которая позволяет аутентифицированным пользователям загружать произвольные...

CVE-2025-61183

CVE-2025-61183 Межсайтовый скриптинг XSS в загрузке аватара пользователя через небезопасную обработку SVG Обзор Уязвимость хранимого межсайтового скриптинга Stored XSS была выявлена в vaahcms, конкретно во взаимодействии между логикой загрузки файлов в MediaController.php и методом storeAvatar в...

EUVD-2026-77719

backpack/crud provides Create, Read, Update & Delete CRUD functions for Backpack, a collection of Laravel packages that help users build custom administration panels. From 6.0.0 until 6.8.14 and 7.0.38, HasUploadFields methods uploadFileToDisk and uploadMultipleFilesToDisk, used through CrudTrait...

CVE-2026-18351 Drag and Drop File Upload for Elementor Forms <= 1.6.0 - Unauthenticated Arbitrary File Upload via 'type' Parameter

The Drag and Drop File Upload for Elementor Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.6.0 via the elementorfileupload function. This is due to insufficient file type validation in the isfiletypevalid function, which uses the...

EUVD-2026-75227

The Drag and Drop File Upload for Elementor Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.6.0 via the elementorfileupload function. This is due to insufficient file type validation in the isfiletypevalid function, which uses the...

PT-2026-89200

🚨 CRITICAL WORDPRESS RCE — A NEW CVSS 9.8 FLAW CAN LET UNAUTHENTICATED ATTACKERS UPLOAD EXECUTABLE FILES. CVE-2026-18351 affects Drag and Drop File Upload for Elementor Forms ≤1.6.0. No login. No user interaction. CyberSignal Priority: 🔴 VERY HIGH 1/8 The flaw is in the plugin's file-upload...

CVE-2026-82524

UnoPim before 2.1.5 contains an authenticated file upload vulnerability in its TinyMCE image upload endpoint . Due to missing file extension and MIME type validation, authenticated administrators can upload arbitrary PHP files to the public storage disk, achieving remote code execution by accessi...

CVE-2026-82524 UnoPim File Upload RCE via TinyMCE Image Upload Endpoint

UnoPim before 2.1.5 contains an authenticated file upload vulnerability that allows authenticated administrators to upload arbitrary PHP files through the TinyMCE image upload endpoint due to missing file extension and MIME type validation. Attackers can upload a PHP web shell to the public stora...

PT-2026-84863

Name of the Vulnerable Software and Affected Versions UnoPim versions prior to 2.1.5 Description Authenticated administrators can upload arbitrary PHP files through the TinyMCE image upload endpoint because the system fails to validate file extensions and MIME types. This allows an attacker to...

CVE-2026-54179

backpack/crud provides Create, Read, Update & Delete CRUD functions for Backpack, a collection of Laravel packages that help users build custom administration panels. From 6.0.0 until 6.8.14 and 7.0.37, the src/app/Library/Uploaders/SingleBase64Image.php methods SingleBase64Image::uploadFiles and...

EUVD-2026-68764

backpack/crud provides Create, Read, Update & Delete CRUD functions for Backpack, a collection of Laravel packages that help users build custom administration panels. From 6.0.0 until 6.8.14 and 7.0.37, the src/app/Library/Uploaders/SingleBase64Image.php methods SingleBase64Image::uploadFiles and...

CVE-2026-54179 backpack/crud: SingleBase64Image accepts any base64 payload behind a `data:image` prefix — SVG-with-script lands on the public disk

backpack/crud provides Create, Read, Update & Delete CRUD functions for Backpack, a collection of Laravel packages that help users build custom administration panels. From 6.0.0 until 6.8.14 and 7.0.37, the src/app/Library/Uploaders/SingleBase64Image.php methods SingleBase64Image::uploadFiles and...

CVE-2026-54179 backpack/crud: SingleBase64Image accepts any base64 payload behind a `data:image` prefix — SVG-with-script lands on the public disk

backpack/crud provides Create, Read, Update & Delete CRUD functions for Backpack, a collection of Laravel packages that help users build custom administration panels. From 6.0.0 until 6.8.14 and 7.0.37, the src/app/Library/Uploaders/SingleBase64Image.php methods SingleBase64Image::uploadFiles and...

EUVD-2026-68094

The Sigma Forms Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.4.5 via the handleformsubmission function. This is due to the plugin dynamically granting the unfilteredupload capability to all users during form submissions and bypassing MIME...

CVE-2026-14494 Sigma Forms Pro <= 1.4.5 - Unauthenticated Unauthenticated Arbitrary File Upload Leading to Remote Code Execution via Pre-built Template File Upload Field

The Sigma Forms Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.4.5 via the handleformsubmission function. This is due to the plugin dynamically granting the unfilteredupload capability to all users during form submissions and bypassing MIME...

PT-2026-83424

The Sigma Forms Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.4.5 via the handle form submission function. This is due to the plugin dynamically granting the unfiltered upload capability to all users during form submissions and bypassing...

CVE-2026-18983

The One User Avatar | User Profile Picture plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.5.4 via the wpuaactionprocessoptionupdate function. This is due to insufficient file type validation in wphandleupload called without a MIME...