85742 matches found
CVE-2026-39759 WordPress Workreap Core plugin <= 3.4.5 - Arbitrary File Upload vulnerability
Employer / Sales Representative Arbitrary File Upload in Workreap Core = 3.4.5 versions...
CVE-2026-39759 WordPress Workreap Core plugin <= 3.4.5 - Arbitrary File Upload vulnerability
Employer / Sales Representative Arbitrary File Upload in Workreap Core = 3.4.5 versions...
EUVD-2026-93268
Employer / Sales Representative Arbitrary File Upload in Workreap Core = 3.4.5 versions...
EUVD-2026-93266
Subscriber Arbitrary File Upload in Taskbot = 6.6 versions...
CVE-2026-39757
The Taskbot plugin for WordPress (versions
CVE-2026-39757 WordPress Taskbot plugin <= 6.6 - Arbitrary File Upload vulnerability
Subscriber Arbitrary File Upload in Taskbot = 6.6 versions...
CVE-2026-39757 WordPress Taskbot plugin <= 6.6 - Arbitrary File Upload vulnerability
Subscriber Arbitrary File Upload in Taskbot = 6.6 versions...
CVE-2026-39755 WordPress WP Duplicate plugin <= 1.1.11 - Arbitrary File Upload vulnerability
Subscriber Arbitrary File Upload in WP Duplicate = 1.1.11 versions...
CVE-2026-39755 WordPress WP Duplicate plugin <= 1.1.11 - Arbitrary File Upload vulnerability
Subscriber Arbitrary File Upload in WP Duplicate = 1.1.11 versions...
CVE-2026-39755
The WordPress WP Duplicate plugin (versions
EUVD-2026-93264
Subscriber Arbitrary File Upload in WP Duplicate = 1.1.11 versions...
CVE-2026-32579 WordPress Kognetiks Chatbot for WordPress plugin <= 2.4.9 - Arbitrary File Upload vulnerability
Unauthenticated Arbitrary File Upload in Kognetiks Chatbot for WordPress = 2.4.9 versions...
CVE-2026-32579 WordPress Kognetiks Chatbot for WordPress plugin <= 2.4.9 - Arbitrary File Upload vulnerability
Unauthenticated Arbitrary File Upload in Kognetiks Chatbot for WordPress = 2.4.9 versions...
EUVD-2026-93240
Unauthenticated Arbitrary File Upload in Kognetiks Chatbot for WordPress = 2.4.9 versions...
CVE-2026-32579
The Kognetiks Chatbot for WordPress plugin (versions
CVE-2026-25057
CVE-2026-25057 MarkUs is a web application for grading student assignments. Summary MarkUs assignment configuration ZIP uploads are vulnerable to path traversal Zip Slip, allowing arbitrary file write and enabling remote code execution. Details Archive entry names are used to construct filesystem...
CVE-2026-55579
CVE-2026-55579 — Pheditor Hardcoded Default Password RCE -critical TL;DR: Pheditor all versions ships with a hardcoded default administrator password admin embedded in its source code. There is no forced password change on first login, only a visual warning. Any unauthenticated attacker can log i...
CVE-2021-31630
OpenPLC WebServer v3 - Authenticated RCE CVE-2021-31630 This exploit is based on the exploit from Exploit-DB made by Fellipe Oliveira. First, authenticate Upload a malicious C file Compile it Start the PLC initiate reverse shell Stop the PLC no need to run it, the reverse shell is already initiat...
CVE-2026-94278 File Media Renamer <= 1.3 - Author+ Arbitrary File Rename via save-attachment-compat
The File Media Renamer WordPress plugin through 1.3 does not verify that the requesting user is authorised to modify a given media attachment, allowing any user with file-upload privileges to rename attachments belonging to other users, including administrators, and to corrupt unrelated stored si...