CVE-2024-56249

🛠️ WordPress Master Toolkit Exploit CVE-2024-56249 🌟 Overview This script exploits an Arbitrary File Upload vulnerability in the WordPress WPMasterToolKit plugin, allowing an attacker to upload a web shell to the server. The vulnerability exists in versions -un -p -fn 📋 Parameters -u / --url:...

CVE-2024-56264

CVE-2024-56264 WordPress ACF City Selector - Arbitrary File Upload Exploit CVE-2024-56264 Overview This repository contains an exploit for CVE-2024-56264 , which is an Arbitrary File Upload vulnerability found in the WordPress ACF City Selector plugin versions = 1.14.0. This vulnerability allows ...

CVE-2025-69906-Monstra-CMS-3.0.4-Arbitrary-File-Upload-to-RCE

make it a readme.md to paste into it CVE-2025-69906: Monstra CMS 3.0.4 Arbitrary File Upload to RCE Author : David PS Abraham Date : February 5, 2026 Severity : Critical - Remote Code Execution CVSS 8.8+ CWE : 434 Unrestricted Upload of File with Dangerous Type Vulnerability Description Monstra C...

CVE-2020-12800

CVE-2020-12800 POC Script for CVE-2020-12800: RCE through Unrestricted File Type Upload Vulnerable plugin for testing hosted at: https://mega.nz/file/aQUClQKCZYeiTYSrPuRnwwlRavy4cqfEXs34Tkq6KQig2RcOas Pentester Academy lab...

CVE-2023-42362

CVE-2023-42362 Author: Abdelrahman Mohamed Mr-n0b3dy Linked-in: https://www.linkedin.com/in/abdelrhman-mohamed-ashraf-7bb43410b/ Vulnerability Name: Unrestricted File Upload that led to ATO Severity: High Product: NCR teller web app Version: 4.4.0 Description: The Unrestricted File Upload leading...

TI WooCommerce Wishlist <= 2.9.2 - Arbitrary File Upload

TemplateInvaders TI WooCommerce Wishlist = 2.10.0 contains an unrestricted file upload vulnerability caused by lack of proper file type validation, letting attackers upload web shells to the server, exploit requires no special privileges. id: CVE-2025-47577 info: name: TI WooCommerce Wishlist =...

CVE-2024-49653

📜 WordPress Portfolleo Plugin Exploit CVE-2024-49653 🚨 Vulnerability Details Title: WordPress Portfolleo plugin = 1.2 - Arbitrary File Upload vulnerability Description: Unrestricted Upload of File with Dangerous Type vulnerability in James Eggers Portfolleo portfolleo allows uploading a web shell...

CVE-2021-25094

CVE-2021-25094 Tatsu Plugin ZIP File addcustomfont unrestricted upload usage php p.php...

CVE-2026-23499

CVE-2026-23499: Saleor vulnerable to stored XSS via Unrestricted File Upload Overview Field| Details ---|--- CVE ID| CVE-2026-23499 Severity| HIGH Advisory| View Advisory Discovered by| Lukasz Rybak Affected Products saleor/saleor Details Saleor allowed authenticated staff users or Apps to upload...

CVE-2025-39401

CVE-2025-39401 WordPress WPAMS Plugin WordPress WPAMS Plugin CVE: CVE-2025-39401 Base Score: 10.0 CRITICAL Unrestricted Upload of File with Dangerous Type vulnerability in mojoomla WPAMS lets attackers upload a web shell to the server, leading to full compromise. This affects WPAMS versions: from...

CVE-2025-60655

CVE-2025-60655 - Remote Code Execution RCE via Unrestricted Upload | ---|--- Researchers| DotAdrien Severity| 9.8 CRITICAL CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Software| Script Pag Description A critical vulnerability in the image upload system allows for Remote Code Execution RCE. The...

Traccar - Unrestricted File Upload

Traccar is an open source GPS tracking system. Versions prior to 6.0 are vulnerable to path traversal and unrestricted upload of file with dangerous type. Since the system allows registration by default, attackers can acquire ordinary user permissions by registering an account and exploit this...

CVE-2025-67325

🚨 Unauthenticated Remote Code Execution RCE via File Upload 📌 Overview Project: QloApps Repository: https://github.com/Qloapps/QloApps Affected Versions: = 1.7.0 Vulnerability Class: Unauthenticated Remote Code Execution Severity: Critical CVSS v3.1: Critical 9.8...

CVE-2025-56218

CVE-2025-56218 Unrestricted File Upload Description An attacker may upload an Excel file that contains a malicious script or a phishing URL. The application converts the file to PDF and forwards it to the intended recipient for digital signature. Because hyperlinks in the generated PDF are...

CVE-2026-114259

A flaw has been found in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This affects the function savefiles of the file adminclass.php. Executing a manipulation of the argument Upload can lead to unrestricted upload. It is possible to launch the attack...

CVE-2026-114262

The file-management-system (dc9ce1bf27f94b23d906cb1e86ce374dc94ca5df) contains an unrestricted file upload vulnerability in the store function of app/Http/Controllers/FileController.php . This issue stems from the manipulation of the File argument, allowing for remote attacks. The exploit has bee...

EUVD-2026-107394

A vulnerability was determined in file-management-system dc9ce1bf27f94b23d906cb1e86ce374dc94ca5df. Impacted is the function store of the file app/Http/Controllers/FileController.php. This manipulation of the argument File causes unrestricted upload. The attack may be initiated remotely. The explo...

EUVD-2026-107363

A flaw has been found in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This affects the function savefiles of the file adminclass.php. Executing a manipulation of the argument Upload can lead to unrestricted upload. It is possible to launch the attack...

CVE-2026-114259

The oretnom23 file-management-system-php software (up to commit 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4 ) is vulnerable to an unrestricted upload flaw. The issue resides in the save_files function within the admin_class.php file. By manipulating the Upload argument, an attacker can achieve an un...

CVE-2026-111832

Unrestricted Upload of File with Dangerous Type vulnerability in WP Mailster WP Mailster wp-mailster allows Upload a Web Shell to a Web Server.This issue affects WP Mailster: from n/a through 1.9.1.0...