CVE-2025-7441

CVE-2025-7441 StoryChief 1.0.42 - Arbitrary File Upload Vulnerability CVE-2025-7441 - Technical summary Affected component: StoryChief WordPress plugin Vulnerability type: Unauthenticated arbitrary file upload Vulnerable endpoint: /wp-json/storychief/webhook Root cause: The plugin accepts a JSON...

CVE-2026-4883

CVE-2026-4883: Piotnet Forms Pro = 2.1.40 - Unauthenticated Arbitrary File Upload → RCE The vulnerability stems from inadequate file type validation in the piotnetformsajaxformbuilder function. The plugin employs an incomplete extension blacklist blocking only php, phpt, php5, php7, and exe while...

CVE-2023-2825-PoC

CVE-2023-2825-PoC Proof-of-concept for CVE-2023-2825, an arbitrary file read vulnerability in GitLab CE/EE 16.0.0. The script logs in with a valid GitLab account, creates the required public nested group structure, creates a public project, uploads an attachment, and uses the vulnerable upload pa...

CVE-2025-69212-PoC

CVE-2025-69212-PoC https://github.com/advisories/GHSA-25fp-8w8p-mx36 OpenSTAManager versions Usage CVE-2025-69212.py -h -u URL -C COOKIE options: -h, --help show this help message and exit -u, --url URL target url, eg http://127.0.0.1 -C, --cookie COOKIE cookie value...

CVE-2026-39770

Unauthenticated Arbitrary File Upload in Doctreat = 1.7.0 versions...

CVE-2026-39755

Subscriber Arbitrary File Upload in WP Duplicate = 1.1.11 versions...

CVE-2026-39757

Subscriber Arbitrary File Upload in Taskbot = 6.6 versions...

CVE-2026-39759

Employer / Sales Representative Arbitrary File Upload in Workreap Core = 3.4.5 versions...

CVE-2026-32579

Unauthenticated Arbitrary File Upload in Kognetiks Chatbot for WordPress = 2.4.9 versions...

CVE-2025-39401

CVE-2025-39401 WordPress WPAMS Plugin WordPress WPAMS Plugin CVE: CVE-2025-39401 Base Score: 10.0 CRITICAL Unrestricted Upload of File with Dangerous Type vulnerability in mojoomla WPAMS lets attackers upload a web shell to the server, leading to full compromise. This affects WPAMS versions: from...

CVE-2026-14894

CVE-2026-14894 — Super Forms Unauthenticated File Upload RCE Nonce Leak → datauristring Upload → Code Execution Overview CVE-2026-14894 is a critical-severity CVSS 9.8 unauthenticated arbitrary file upload vulnerability in the Super Forms – Drag & Drop Form Builder WordPress plugin by WebRehab...

CVE-2026-48907

CVE-2026-48907 - Joomla! JCE Unauthenticated RCE Joomla! JCE extension This tool is for educational and authorized testing purposes only. Use only on systems you own or have explicit permission to test The author is not responsible for any misuse or illegal activities Always obtain proper...

CVE-2026-39770

The Doctreat WordPress theme, version 1.7.0 and below , is vulnerable to an unauthenticated arbitrary file upload (CWE-434). This vulnerability allows an attacker to upload files with dangerous types to the server. The impact is rated as CRITICAL (CVSS 3.1 score of 10.0), potentially leading to h...

EUVD-2026-93277

Unauthenticated Arbitrary File Upload in Doctreat = 1.7.0 versions...

CVE-2026-39770 WordPress Doctreat theme <= 1.7.0 - Arbitrary File Upload vulnerability

Unauthenticated Arbitrary File Upload in Doctreat = 1.7.0 versions...

CVE-2026-39770 WordPress Doctreat theme <= 1.7.0 - Arbitrary File Upload vulnerability

Unauthenticated Arbitrary File Upload in Doctreat = 1.7.0 versions...

EUVD-2026-93268

Employer / Sales Representative Arbitrary File Upload in Workreap Core = 3.4.5 versions...

CVE-2026-39759

The Workreap Core WordPress plugin versions

CVE-2026-39759 WordPress Workreap Core plugin <= 3.4.5 - Arbitrary File Upload vulnerability

Employer / Sales Representative Arbitrary File Upload in Workreap Core = 3.4.5 versions...

CVE-2026-39759 WordPress Workreap Core plugin <= 3.4.5 - Arbitrary File Upload vulnerability

Employer / Sales Representative Arbitrary File Upload in Workreap Core = 3.4.5 versions...