WordPress WPGYM plugin <= 67.1.0 - Unauthenticated Arbitrary File Upload vulnerability

Unauthenticated Arbitrary File Upload vulnerability discovered by Tonn in WordPress Plugin WPGYM versions = 67.1.0...

WordPress Hash Form plugin <= 1.1.9 - Unauthenticated Limited File Upload vulnerability

Unauthenticated Limited File Upload vulnerability discovered by Rein Daelman trein in WordPress Plugin Hash Form versions = 1.1.9...

WordPress Jupiter X Core plugin <= 4.6.5 - Unauthenticated Arbitrary File Upload vulnerability

Unauthenticated Arbitrary File Upload vulnerability discovered by Geo Void in WordPress Plugin JupiterX Core versions = 4.6.5...

WordPress YayExtra plugin <= 1.3.7 - Unauthenticated Arbitrary File Upload via handle_upload_file Function vulnerability

Unauthenticated Arbitrary File Upload via handleuploadfile Function vulnerability discovered by wesley wcraft in WordPress Plugin YayExtra versions = 1.3.7...

CVE-2024-6314 IQ Testimonials <= 2.2.7 - Unauthenticated Arbitrary File Upload

The IQ Testimonials plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'processimageupload' function in versions up to, and including, 2.2.7. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected...

WordPress Hash Form – Drag & Drop Form Builder plugin <= 1.1.0 - Unauthenticated Arbitrary File Upload to Remote Code Execution vulnerability

Unauthenticated Arbitrary File Upload to Remote Code Execution vulnerability discovered by Francesco Carlucci in WordPress Plugin Hash Form versions = 1.1.0...

PT-2024-26237 · Opentext · Opentext Imanager

Name of the Vulnerable Software and Affected Versions: OpenText iManager version 3.2.6.0200 Description: The issue is related to a File Upload vulnerability in an unauthenticated session, which could allow an attacker to upload a file without authentication. Recommendations: For OpenText iManager...

WordPress Startklar Elementor Addons plugin <= 1.7.13 - Unauthenticated Arbitrary File Upload vulnerability

Unauthenticated Arbitrary File Upload vulnerability discovered by István Márton in WordPress Plugin Startklar Elementor Addons versions = 1.7.13...

WordPress Product Addons & Fields for WooCommerce plugin <= 32.0.18 - Unauthenticated Arbitrary File Upload via ppom_upload_file vulnerability

Unauthenticated Arbitrary File Upload via ppomuploadfile vulnerability discovered by andrea bocchetti in WordPress Plugin PPOM for WooCommerce versions = 32.0.18...

CVE-2024-0916 Unauthenticated Remote Code Execution in UvDesk Community

Unauthenticated file upload allows remote code execution. This issue affects UvDesk Community: from 1.0.0 through 1.1.3...

PT-2024-15917 · Unknown · Uvdesk Community

Name of the Vulnerable Software and Affected Versions: UvDesk Community versions 1.0.0 through 1.1.3 Description: Unauthenticated file upload allows remote code execution. Recommendations: For UvDesk Community versions 1.0.0 through 1.1.3, consider disabling the file upload feature until a patch ...

Uvdesk 安全漏洞

Uvdesk is a complete ticket support system open-sourced by Uvdesk India. A security vulnerability exists in UvDesk versions 1.0.0 through 1.1.3 that stems from an unauthenticated file upload allowing remote code execution...

PT-2024-15015 · WordPress · Wp Jobsearch

Name of the Vulnerable Software and Affected Versions: WP JobSearch WordPress plugin versions prior to 2.3.4 Description: The issue allows unauthenticated attackers to upload arbitrary files, such as PHP files, to the server due to a lack of file validation for uploads. This could potentially lea...

WooCommerce Easy Checkout Field Editor, Fees & Discounts < 3.5.13 - Unauthenticated Arbitrary File Upload

Description The SysBasics Easy Checkout Field Editor, Fees & Discounts plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 3.5.12. This makes it possible for unauthenticated attackers to upload arbitrary files on t...

VulnCheck KEV: CVE-2021-27964

SonLogger before 6.4.1 is affected by Unauthenticated Arbitrary File Upload. An attacker can send a POST request to /Config/SaveUploadedHotspotLogoFile without any authentication or session header. There is no check for the file extension or content of the uploaded file...

CVE-2023-45724 Unauthenticated File Upload affects DRYiCE MyXalytics

HCL DRYiCE MyXalytics product is impacted by unauthenticated file upload vulnerability. The web application permits the upload of a certain file without requiring user authentication...

CVE-2023-45724 Unauthenticated File Upload affects DRYiCE MyXalytics

HCL DRYiCE MyXalytics product is impacted by unauthenticated file upload vulnerability. The web application permits the upload of a certain file without requiring user authentication...

CVE-2023-45724

CVE-2023-45724 affects HCL DRYiCE MyXalytics: unauthenticated file upload in the web application (no user authentication required). The vulnerability allows uploading certain files, with CVSS:3.1 base metrics indicating high impact to confidentiality, integrity, and availability (C:H, I:H, A:H; A...

VulnCheck KEV: CVE-2021-30118

An attacker can upload files with the privilege of the Web Server process for Kaseya VSA Unified Remote Monitoring & Management RMM 9.5.4.2149 and subsequently use these files to execute asp commands The api /SystemTab/uploader.aspx is vulnerable to an unauthenticated arbitrary file upload...

WordPress Royal Elementor Addons Remote Code Execution Exploit

Exploit for the unauthenticated file upload vulnerability in WordPress Royal Elementor Addons and Templates plugin 'WordPress Royal Elementor Addons RCE', 'Description' = %q Exploit for the unauthenticated file upload vulnerability in WordPress Royal Elementor Addons and Templates plugin...