CVE-2025-54962

🔥 CVE-2025-54962 — OpenPLC Runtime Webserver의 안전하지 않은 파일 업로드 OpenPLC Runtime ≤ 2024-12-31 — 저장된 XSS, CSRF 📌 요약 저는 OpenPLC Runtime 웹서버릴리스 버전: 2024-12-31에서 인증된 사용자가 프로필 사진으로 임의의 파일예: .html, .svg을 업로드할 수 있는 취약점을 발견했습니다. 이 파일들은 /static/ 디렉터리에 저장되며 인증 없이 접근 가능하여 저장된 XSS 또는 악성 호스팅 시나리오를 가능하게 합니다. 🧪 영향을...

sudowp-postgallery

SudoWP PostGallery Безопасный форк Авторы: SudoWP, WP Republic Оригинальные авторы: RTO GmbH Теги: галерея, безопасность, исправлено, cve-2025-13543 Требуется как минимум: 5.8 Протестировано до: 6.7 Стабильная версия: 1.12.6 Лицензия: GPLv2 или более поздняя Уведомление о безопасности Это...

CVE-2026-18351 Drag and Drop File Upload for Elementor Forms <= 1.6.0 - Unauthenticated Arbitrary File Upload via 'type' Parameter

The Drag and Drop File Upload for Elementor Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.6.0 via the elementorfileupload function. This is due to insufficient file type validation in the isfiletypevalid function, which uses the...

EUVD-2026-75227

The Drag and Drop File Upload for Elementor Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.6.0 via the elementorfileupload function. This is due to insufficient file type validation in the isfiletypevalid function, which uses the...

PT-2026-89200

🚨 CRITICAL WORDPRESS RCE — A NEW CVSS 9.8 FLAW CAN LET UNAUTHENTICATED ATTACKERS UPLOAD EXECUTABLE FILES. CVE-2026-18351 affects Drag and Drop File Upload for Elementor Forms ≤1.6.0. No login. No user interaction. CyberSignal Priority: 🔴 VERY HIGH 1/8 The flaw is in the plugin's file-upload...

CVE-2023-47129

CVE-2023-47129 - Statamic CMS 버전 " image.jpg 4 이 파일의 이름을 image.php로 변경합니다. 5 양식 페이지에서 생성한 image.php 파일을 업로드합니다. 6 이제 이 파일을 실행하려면 https://yoursite.com/assets/image.php에 접속하면 됩니다. 참고:https://yoursite.com을 테스트 설치 주소로 바꾸세요. 참조 GHSA-72hg-5wr5-rmfc...

CVE-2025-2005

WordPress FEUP 임의 파일 업로드 익스플로잇 CVE-2025-2005 이 저장소는 등록 양식에 MIME/파일 형식 검증이 없어 임의 파일 업로드에 취약한 WordPress Front End Users 플러그인3.2.32까지에 대한 PoCProof of Concept 익스플로잇을 제공합니다. 이를 통해 인증되지 않은 공격자가 악성 파일예: 웹 셸을 업로드하여 서버에서 원격 코드 실행RCE으로 이어질 수 있습니다. 기능 CVE-2025-2005: WordPress Front End Users 플러그인 파일 업로드 취약점...

CVE-2025-61183

CVE-2025-61183 Межсайтовый скриптинг XSS в загрузке аватара пользователя через небезопасную обработку SVG Обзор Уязвимость хранимого межсайтового скриптинга Stored XSS была выявлена в vaahcms, конкретно во взаимодействии между логикой загрузки файлов в MediaController.php и методом storeAvatar в...

CVE-2026-82524

UnoPim before 2.1.5 contains an authenticated file upload vulnerability in its TinyMCE image upload endpoint . Due to missing file extension and MIME type validation, authenticated administrators can upload arbitrary PHP files to the public storage disk, achieving remote code execution by accessi...

CVE-2026-82524 UnoPim File Upload RCE via TinyMCE Image Upload Endpoint

UnoPim before 2.1.5 contains an authenticated file upload vulnerability that allows authenticated administrators to upload arbitrary PHP files through the TinyMCE image upload endpoint due to missing file extension and MIME type validation. Attackers can upload a PHP web shell to the public stora...

PT-2026-84863

Name of the Vulnerable Software and Affected Versions UnoPim versions prior to 2.1.5 Description Authenticated administrators can upload arbitrary PHP files through the TinyMCE image upload endpoint because the system fails to validate file extensions and MIME types. This allows an attacker to...

CVE-2026-54179

backpack/crud provides Create, Read, Update & Delete CRUD functions for Backpack, a collection of Laravel packages that help users build custom administration panels. From 6.0.0 until 6.8.14 and 7.0.37, the src/app/Library/Uploaders/SingleBase64Image.php methods SingleBase64Image::uploadFiles and...

CVE-2026-54179 backpack/crud: SingleBase64Image accepts any base64 payload behind a `data:image` prefix — SVG-with-script lands on the public disk

backpack/crud provides Create, Read, Update & Delete CRUD functions for Backpack, a collection of Laravel packages that help users build custom administration panels. From 6.0.0 until 6.8.14 and 7.0.37, the src/app/Library/Uploaders/SingleBase64Image.php methods SingleBase64Image::uploadFiles and...

EUVD-2026-68094

The Sigma Forms Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.4.5 via the handleformsubmission function. This is due to the plugin dynamically granting the unfilteredupload capability to all users during form submissions and bypassing MIME...

CVE-2026-14494 Sigma Forms Pro <= 1.4.5 - Unauthenticated Unauthenticated Arbitrary File Upload Leading to Remote Code Execution via Pre-built Template File Upload Field

The Sigma Forms Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.4.5 via the handleformsubmission function. This is due to the plugin dynamically granting the unfilteredupload capability to all users during form submissions and bypassing MIME...

CVE-2026-18983

The One User Avatar | User Profile Picture plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.5.4 via the wpuaactionprocessoptionupdate function. This is due to insufficient file type validation in wphandleupload called without a MIME...

EUVD-2026-67408

The One User Avatar | User Profile Picture plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.5.4 via the wpuaactionprocessoptionupdate function. This is due to insufficient file type validation in wphandleupload called without a MIME...

CVE-2026-18983 One User Avatar | User Profile Picture <= 2.5.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via wpua-file Parameter

The One User Avatar | User Profile Picture plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.5.4 via the wpuaactionprocessoptionupdate function. This is due to insufficient file type validation in wphandleupload called without a MIME...

EUVD-2026-65585

Webkul QloApps does not perform proper validation on uploaded file extensions or MIME types before moving the file to a publicly accessible directory. A remote, authenticated attacker with administrative privileges could upload executable files and achieve remote code execution. Fixed in 153ec1c...

PT-2026-80749

Name of the Vulnerable Software and Affected Versions backpack/crud versions 6.0.0 through 6.8.13 backpack/crud versions 7.0.0 through 7.0.37 Description An authenticated administrator can store arbitrary file content on the configured disk. This occurs because the SingleBase64Image::uploadFiles...