Lucene search
K

14 matches found

GithubExploit
GithubExploit
added 2026/05/26 5:34 a.m.66 views

Exploit for CVE-2026-2942

CVE-2026-2942 ProSolution WP Client — Unauthenticated File U...

9.8CVSS5.8AI score0.00578EPSS
Exploits1
Patchstack
Patchstack
added 2026/05/21 7:22 a.m.7 views

WordPress ProSolution WP Client plugin <= 2.0.0 - Unauthenticated Arbitrary File Upload vulnerability

Unauthenticated Arbitrary File Upload vulnerability discovered by snr in WordPress Plugin ProSolution WP Client versions = 2.0.0...

9.8CVSS5.8AI score0.00952EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2026/05/20 2:16 a.m.13 views

CVE-2026-6555

The ProSolution WP Client plugin for WordPress is vulnerable to Arbitrary File Upload in versions up to, and including, 2.0.0. This is due to an array validation mismatch where only the first file in the upload array undergoes extension and MIME type validation, while all files are processed and...

9.8CVSS0.00952EPSS
Exploits0References10
Cvelist
Cvelist
added 2026/05/20 1:25 a.m.38 views

CVE-2026-6555 ProSolution WP Client <= 2.0.0 - Unauthenticated Arbitrary File Upload via 'files'

The ProSolution WP Client plugin for WordPress is vulnerable to Arbitrary File Upload in versions up to, and including, 2.0.0. This is due to an array validation mismatch where only the first file in the upload array undergoes extension and MIME type validation, while all files are processed and...

9.8CVSS0.00952EPSS
Exploits0References10
ATTACKERKB
ATTACKERKB
added 2026/05/20 1:25 a.m.5 views

CVE-2026-6555

The ProSolution WP Client plugin for WordPress is vulnerable to Arbitrary File Upload in versions up to, and including, 2.0.0. This is due to an array validation mismatch where only the first file in the upload array undergoes extension and MIME type validation, while all files are processed and...

9.8CVSS6.4AI score0.00952EPSS
Exploits0References10
Vulnrichment
Vulnrichment
added 2026/05/20 1:25 a.m.10 views

CVE-2026-6555 ProSolution WP Client <= 2.0.0 - Unauthenticated Arbitrary File Upload via 'files'

The ProSolution WP Client plugin for WordPress is vulnerable to Arbitrary File Upload in versions up to, and including, 2.0.0. This is due to an array validation mismatch where only the first file in the upload array undergoes extension and MIME type validation, while all files are processed and...

9.8CVSS6.4AI score0.00952EPSS
Exploits0References10
CNNVD
CNNVD
added 2026/05/20 12:0 a.m.5 views

WordPress plugin ProSolution WP Client 代码问题漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There we...

9.8CVSS6AI score0.00952EPSS
Exploits0References1
Patchstack
Patchstack
added 2026/04/10 9:9 a.m.4 views

WordPress ProSolution WP Client plugin <= 1.9.9 - Unauthenticated Arbitrary File Upload via proSol_fileUploadProcess vulnerability

Unauthenticated Arbitrary File Upload via proSolfileUploadProcess vulnerability discovered by Nabil Irawan - Heroes Cyber Security in WordPress Plugin ProSolution WP Client versions = 1.9.9...

9.8CVSS5.8AI score0.00578EPSS
Exploits1References1Affected Software1
EUVD
EUVD
added 2026/04/08 9:33 p.m.5 views

EUVD-2026-20531

The ProSolution WP Client plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'proSolfileUploadProcess' function in all versions up to, and including, 1.9.9. This makes it possible for unauthenticated attackers to upload arbitrary files on the...

9.8CVSS6.6AI score0.00578EPSS
Exploits1References4
NVD
NVD
added 2026/04/08 7:25 p.m.9 views

CVE-2026-2942

The ProSolution WP Client plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'proSolfileUploadProcess' function in all versions up to, and including, 1.9.9. This makes it possible for unauthenticated attackers to upload arbitrary files on the...

9.8CVSS0.00578EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2026/04/08 5:25 p.m.2 views

CVE-2026-2942 ProSolution WP Client <= 1.9.9 - Unauthenticated Arbitrary File Upload via proSol_fileUploadProcess

The ProSolution WP Client plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'proSolfileUploadProcess' function in all versions up to, and including, 1.9.9. This makes it possible for unauthenticated attackers to upload arbitrary files on the...

9.8CVSS6.6AI score0.00578EPSS
Exploits1References3
CVE
CVE
added 2026/04/08 5:25 p.m.14 views

CVE-2026-2942

The CVE-2026-2942 entry documents an unauthenticated arbitrary file upload vulnerability in the ProSolution WP Client WordPress plugin, affecting all versions up to 1.9.9 due to missing file type validation in proSol_fileUploadProcess. This could enable remote code execution on the affected site....

9.8CVSS6.6AI score0.00578EPSS
Exploits1References3
CNNVD
CNNVD
added 2026/04/08 12:0 a.m.5 views

WordPress plugin ProSolution WP Client 代码问题漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

9.8CVSS6.3AI score0.00578EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2026/04/08 12:0 a.m.10 views

PT-2026-31314

Name of the Vulnerable Software and Affected Versions ProSolution WP Client plugin for WordPress versions up to and including 1.9.9 Description The ProSolution WP Client plugin for WordPress is susceptible to arbitrary file uploads because of a lack of file type validation within the proSol...

9.8CVSS6.2AI score0.00578EPSS
Exploits1References11
Rows per page
Query Builder