EUVD-2026-89631

The All in One Files Upload WordPress plugin before 2.0.17 adds SVG to the site's allowed upload types and does not sanitise uploaded files or verify the authenticity of its public upload requests, allowing unauthenticated users to store files containing active content which run in the site's...

CVE-2026-85573 All in One Files Upload for WooCommerce 2.0.3 - 2.0.16 - Unauthenticated Stored XSS via SVG Upload

The All in One Files Upload WordPress plugin before 2.0.17 adds SVG to the site's allowed upload types and does not sanitise uploaded files or verify the authenticity of its public upload requests, allowing unauthenticated users to store files containing active content which run in the site's...

EUVD-2026-89637

The Zella Theme WordPress theme before 2.6.3 does not perform any capability or nonce check on one of its font upload actions, which is available to unauthenticated users, allowing them to upload arbitrary files, including PHP ones, and achieve remote code execution...

CVE-2026-75873

The Zella Theme WordPress theme, specifically versions before 2.6.3 , is vulnerable to unauthenticated arbitrary file upload. The root cause is a lack of capability or nonce checks on a font upload action. Attackers can exploit this to upload arbitrary files, including PHP files , leading to remo...

CVE-2026-75873 Zella Theme < 2.6.3 - Unauthenticated Arbitrary File Upload

The Zella Theme WordPress theme before 2.6.3 does not perform any capability or nonce check on one of its font upload actions, which is available to unauthenticated users, allowing them to upload arbitrary files, including PHP ones, and achieve remote code execution...

CVE-2026-75873 Zella Theme < 2.6.3 - Unauthenticated Arbitrary File Upload

The Zella Theme WordPress theme before 2.6.3 does not perform any capability or nonce check on one of its font upload actions, which is available to unauthenticated users, allowing them to upload arbitrary files, including PHP ones, and achieve remote code execution...

Exploit for CVE-2026-18143

CVE-2026-18143...

CVE-2025-57462

CVE-2025-57462 Des: Stored XSS via Malicious File Upload in machpanel 8.0.32. POC: Navigate to https://controlpaneldomain/Client/SubmitTicket.aspx and Upload PDF file that contain XSS scripts in metadata, after submitting the ticket you can execute malicius XSS script by accessing the uplaoded...

CVE-2025-57298

Stored XSS via Unsafe Markdown Rendering in Kotaemon Summary Kotaemon is an open-source RAG Retrieval-Augmented Generation based document QA system that provides a web interface for querying uploaded documents such as PDF, Word, and Excel files. A stored cross-site scripting XSS vulnerability...

WP Time Capsule Plugin - Remote Code Execution

The Backup and Staging by WP Time Capsule plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the the UploadHandler.php file and no direct file access prevention in all versions up to, and including, 1.22.21. This makes it possible for unauthenticat...

CVE-2019-12889

CVE-2019-12889 Resumen Existe una escalada de privilegios no autenticada en SailPoint Desktop Password Reset 7.2. Un usuario con acceso local únicamente a la pantalla de inicio de sesión de Windows puede escalar sus privilegios a NT AUTHORITY\System. Un atacante necesitaría acceso local a la...

CVE-2025-31324-File-Upload

CVE-2025-31324-File-Upload Un endpoint de carga de archivos totalmente no autenticado en Visual Composer permite a cualquiera subir archivos arbitrarios por ejemplo, un web-shell JSP al servidor. Herramienta de prueba de concepto para verificar y explotar la vulnerabilidad de carga de archivos no...

CVE-2026-102842

A vulnerability was identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Affected by this issue is the function appuserloginmodel.php::cekUserLogin of the file application/models/appuserloginmodel.php of the component KCFinder File Manager. Such manipulatio...

CVE-2026-12793

CVE-2026-12793 — JetFormBuilder ≤ 3.6.2 Unauthenticated privilege escalation → plugin upload → RCE. Affected Versions Vulnerable: = 3.6.3 Quick Usage Check single target python poc.py -u https://target.example --mode check Full exploit requires an existing low-privilege account python poc.py -u...

CVE-2025-3616

Módulo de Metasploit: Subida de Archivos Arbitraria en el Plugin Greenshift de WordPress CVE-2025-3616 Este repositorio contiene un módulo de Metasploit para explotar la CVE-2025-3616 , una vulnerabilidad de subida de archivos arbitraria en el plugin Greenshift de WordPress versiones 11.4 a 11.4....

CVE-2025-52691

CVE-2025-52691 SmarterMail: Carga arbitraria de archivos no autenticada que permite RCE Resumen Carga crítica de archivos arbitraria no autenticada que permite ejecución remota de código. Campo| Valor ---|--- Producto| SmarterMail Afectado| Build 9406 y anteriores CVSS| 10.0 Crítico Tipo| Carga d...

EUVD-2026-89469

The TMS file upload endpoint fails to enforce server-side file type restrictions, allowing an attacker to upload and execute arbitrary PHP files on the web server...

CVE-2026-102842 gedelumbung HospitalManagement KCFinder File Manager app_user_login_model.php cekUserLogin unrestricted upload

A vulnerability was identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Affected by this issue is the function appuserloginmodel.php::cekUserLogin of the file application/models/appuserloginmodel.php of the component KCFinder File Manager. Such manipulatio...

EUVD-2026-89543

A vulnerability was identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Affected by this issue is the function appuserloginmodel.php::cekUserLogin of the file application/models/appuserloginmodel.php of the component KCFinder File Manager. Such manipulatio...

CVE-2026-102842

A vulnerability exists in the KCFinder File Manager component of gedelumbung HospitalManagement (up to commit c2d45543789a3887067d3915f69d44cfc2cf76a8). The root cause is located in the app_user_login_model.php::cekUserLogin function within the application/models/app_user_login_model.php file, wh...