CVE-2024-43160

Wordpress BerqWP = 1.7.6 - 未授权任意文件上传 CVE-2024-43160 BerqWP – 用于核心网页指标、缓存、CDN、图片、CSS 和 JavaScript 的自动化全合一 PageSpeed 优化插件存在任意文件上传漏洞，原因是在 /api/storewebp.php 文件中缺少文件类型验证，影响所有版本直至并包括 1.7.6。这使得未认证的攻击者能够在受影响站点的服务器上上传任意文件，从而可能导致远程代码执行。 如需更多 WordPress 漏洞利用及独家漏洞，请通过 Telegram 联系我 @KtN1990。 使用 运行此漏洞利用程序需要...

CVE-2025-5961

🚨 迁移、备份、暂存 – WPvivid Backup & Migration 📈 此漏洞影响拥有超过700,000+ 次安装 的插件 📝 CVE 详情 CVE: CVE-2025-5961 CVSS: 7.2（高） 发布时间: 2025年7月3日 🔍 描述 用于 WordPress 的 Migration, Backup, Staging – WPvivid Backup & Migration 插件因缺少对 wpvividuploadimportfiles 函数的文件类型验证，导致所有版本（包括 0.9.116）都存在 任意文件上传 漏洞。 这使得...

CVE-2024-52380

CVE-2024-52380 Picsmize -----------------------------263629263440545280502417734995 Content-Disposition: form-data; name="action" PicsUploadManualFile -----------------------------263629263440545280502417734995--...

CVE-2025-3054-Exploit

CVE-2025-3054 漏洞利用： 在此下载 详情 CVE 编号 ：CVE-2025-3054 发布日期 ：2025年6月5日 CVSS ：8.8 可用补丁： （尚无官方补丁） 影响 WordPress 的 WP User Frontend Pro 插件在 4.1.3 及之前的所有版本中，由于 uploadfiles 函数缺少文件类型验证，存在任意文件上传漏洞。这使得具有订阅者（Subscriber）级别及以上访问权限的已认证攻击者能够在受影响站点的服务器上上传任意文件，从而可能导致远程代码执行。请注意，利用该漏洞需要启用“私信”（Private Message）模块，并且需要使用...

CVE-2025-4389

CVE-2025-4389 漏洞利用 详细信息 发布日期 : 2025年5月16日 更新日期 : 2025年5月17日 严重性 : 严重（CVSS评分：9.8） CWE : CWE-434: CWE-434 危险类型文件的不受限上传 受影响版本 : 从 n/a 到 2.6.8.1 的所有版本 研究人员 : https://www.wordfence.com/threat-intel/vulnerabilities/researchers/friderika-baranyai CVSS向量 CVSS版本 : 9.8 向量字符串 :...

CVE-2024-54262

CVE-2024-54262 WooCommerce 导入导出插件 = 1.5 - 认证用户（订阅者及以上）任意文件上传 描述 WordPress 的 WooCommerce 导入导出插件在所有版本（包括 1.5）中存在任意文件上传漏洞，原因是缺少文件类型验证。这使得经过身份验证的攻击者（拥有订阅者及以上级别访问权限）能够在受影响站点的服务器上上传任意文件，从而可能导致远程代码执行。 详情 类型 : plugin 标识 : import-export-for-woocommerce 受影响版本 : 1.5 CVSS 分数 : 9.9 CVSS 评级 : Critical CVSS 向量 ...

CVE-2024-50510

CVE-2024-50510 AR For Woocommerce = 6.2 - 未经身份验证的任意文件上传 描述 WordPress 的 AR for WooCommerce 插件在所有版本（包括 6.2）中由于缺少文件类型验证，容易受到任意文件上传攻击。这使得未经身份验证的攻击者可以在受影响站点的服务器上上传任意文件，从而可能导致远程代码执行。 详细信息 类型 : plugin 标识符 : ar-for-woocommerce 受影响版本 : 6.2 CVSS 分数 : 9.8 CVSS 评级 : 严重 CVSS 向量 :...

CVE-2025-48148

CVE-2025-48148 StoreKeeper for WooCommerce = 14.4.4 - 未认证任意文件上传 🚀 StoreKeeper for WooCommerce = 14.4.4 - 未认证任意文件上传漏洞利用 📝 描述 WordPress 的 StoreKeeper for WooCommerce 插件由于在 14.4.4 及之前的所有版本中缺少文件类型验证，因而存在任意文件上传漏洞。 这允许未认证的攻击者向受影响站点的服务器上传任意文件，进而可能导致远程代码执行。 CVE： CVE-2025-48148 CVSS： 9.8（严重） 🛡️ 脚本概述 脚本名称：...

EUVD-2026-75934

The MIPL Grouped Checkout Fields for WooCommerce – Customize & Organize Checkout Fields. plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the miplwcuploadfile function in all versions up to, and including, 1.2.1. This makes it possible for...

CVE-2026-8778 MIPL Grouped Checkout Fields for WooCommerce <= 1.2.2 - Unauthenticated Arbitrary File Upload

The MIPL Grouped Checkout Fields for WooCommerce – Customize & Organize Checkout Fields. plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the miplwcuploadfile function in all versions up to, and including, 1.2.1. This makes it possible for...

PT-2026-89761

The MIPL Grouped Checkout Fields for WooCommerce – Customize & Organize Checkout Fields. plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the mipl wc upload file function in all versions up to, and including, 1.2.1. This makes it possible for...

CVE-2026-75865

The WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode plugin for WordPress is vulnerable to arbitrary file upload due to missing file type validation in the saasuploadlogo function combined with an authorization bypass on the WPLP connector REST endpoin...

CVE-2026-75865 WPLP Cookie Consent <= 4.4.1 - Unauthenticated Arbitrary File Upload via 'upload-logo' REST Endpoint

The WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode plugin for WordPress is vulnerable to arbitrary file upload due to missing file type validation in the saasuploadlogo function combined with an authorization bypass on the WPLP connector REST endpoin...

EUVD-2026-57082

The giftware WordPress plugin before 4.2.10 does not validate the type of uploaded files in one of its upload paths, allowing unauthenticated users to upload arbitrary files, including PHP code, which can lead to remote code execution...

CVE-2026-6147

The LightSync Pro WordPress plugin is affected by an insecure file upload vulnerability due to missing file type validation in rest_replace_media() in all versions up to and including 2.1.6. The flaw allows authenticated attackers with Author-level access or higher to upload arbitrary files on th...

CVE-2026-6147 LightSync Pro <= 2.1.6 - Authenticated (Author+) Arbitrary File Upload

The LightSync Pro plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the restreplacemedia function in all versions up to, and including, 2.1.6. This makes it possible for authenticated attackers, with Author-level access and above, to upload...

CVE-2026-1771

The MapSVG WordPress plugin is affected up to version 8.14.0. The vulnerability stems from missing file type validation in the SVGFile constructor (due to an incorrect conditional check), allowing authenticated attackers with Administrator+ access to upload arbitrary files via the SVGFile upload ...

CVE-2026-57311

Windu CMS does not validate types of uploaded files. An authenticated attacker can upload arbitrary files, including PHP. This can lead to Remote Code Execution. Because vendor contact attempts were unsuccessful, the vulnerability has only been confirmed in version 4.1 but may also affect other...

CVE-2026-15282

The Instant Appointment plugin for WordPress (affected versions up to 1.2) is vulnerable to arbitrary file uploads due to missing file type validation in the insapp_upload_image_as_attachment function. This allows unauthenticated attackers to upload arbitrary files to the server, with a potential...

CVE-2026-4883 Piotnet Forms <= 2.1.40 - Unauthenticated Arbitrary File Upload via Form File Upload

The Piotnet Forms plugin for WordPress is vulnerable to arbitrary file upload due to missing file type validation in the 'piotnetformsajaxformbuilder' function in all versions up to, and including, 2.1.40. The plugin uses an incomplete extension blacklist that only blocks php, phpt, php5, php7, a...