PT-2026-67969

Name of the Vulnerable Software and Affected Versions zportals WordPress plugin versions prior to 6.3.4 Description The plugin fails to properly validate uploaded files by trusting the client-supplied content type and preserving the original file extension. This allows any authenticated user with...

PT-2026-68311

Name of the Vulnerable Software and Affected Versions GitHub Enterprise Server versions prior to 3.22 Description A path traversal issue allows an unauthenticated attacker with network reachability to delete arbitrary files and directories on the instance, including the user storage directory...

PT-2026-68173

Name of the Vulnerable Software and Affected Versions wiseCampaign – WooCommerce Conversions Made Easy versions prior to 1.1.17 Description The plugin is susceptible to unauthorized data disclosure and modification because all REST API endpoints are registered with permission callback = ' return...

PT-2026-68361

Name of the Vulnerable Software and Affected Versions Rongzhitong Visual Integrated Command and Dispatch Platform versions prior to 20260617 Description An unrestricted upload issue exists in the /dm/dispatch/userinfo/upload endpoint. By manipulating the File argument, a remote attacker can uploa...

PT-2026-68028

Name of the Vulnerable Software and Affected Versions LightSync Pro versions prior to 2.1.7 Description The LightSync Pro plugin for WordPress allows authenticated attackers with Author-level access or higher to upload arbitrary files to the server. This issue occurs because the rest replace medi...

PT-2026-67977

Name of the Vulnerable Software and Affected Versions Bit Form WordPress plugin versions prior to 3.2.0 Description Stored Cross-Site Scripting occurs because the plugin fails to sanitize uploaded signature images before storage. This allows unauthenticated attackers to upload a specially crafted...

PT-2026-67978

Name of the Vulnerable Software and Affected Versions The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More WordPress plugin versions prior to 3.0.8 Description The plugin fails to sanitize uploaded SVG files when the SVG upload feature is enabled. This allows...

PT-2026-68156

Name of the Vulnerable Software and Affected Versions Fledge affected versions not specified Description The backup-restore upload handler upload backup python/fledge/services/core/api/backup restore.py fails to validate per-member paths or use a filter argument when calling tarfile.extractalltem...

PT-2026-68573

Name of the Vulnerable Software and Affected Versions Iptanus File Upload versions prior to 5.1.8 Description An unauthenticated SQL Injection exists due to insufficient escaping of user-supplied parameters and a lack of proper preparation of SQL queries. This allows attackers to append additiona...

PT-2026-68228

Name of the Vulnerable Software and Affected Versions imranrisal-dev Student-Management-System affected versions not specified Description A remote unrestricted upload issue exists within the Shared Upload Helper component. The problem occurs in the storeProfileImage function located in the stude...

PT-2026-68119

Name of the Vulnerable Software and Affected Versions wp-downloadmanager versions 1.68.11 through 1.69.0 wp-downloadmanager versions 6.9.4 through 6.9.4 Description An admin-privileged user with manage downloads capabilities can upload arbitrary files through the 'download-add.php' endpoint. The...

PT-2026-68157

Name of the Vulnerable Software and Affected Versions Fledge affected versions not specified Description The backup-restore upload handler upload backup located in python/fledge/services/core/api/backup restore.py is susceptible to OS command injection. The handler processes the first extracted t...

VulnCheck KEV: CVE-2026-66665

Unauthenticated Arbitrary File Upload in Type Hub = 2.0.6 versions...

py-djangorestframework -- two vulnerabilities

Bruno Alla reports: Potential bypass of Django DATAUPLOADMAXMEMORYSIZE when parsing oversized JSON and urlencoded request bodies via DRF request.data AdminRenderer may disclose GET-protected data when rendering invalid write requests...

PT-2026-68095

Name of the Vulnerable Software and Affected Versions Eclipse Theia versions prior to 1.73.2 Description The @theia/filesystem backend binds the 'POST /file-upload' endpoint in every filesystem-enabled deployment. The handler processes an absolute path provided by an attacker via the multipart ur...

CVE-2026-60009: Cross-Site Request Forgery (CSRF)

In Eclipse Theia versions up to and including 1.73.1, the @theia/filesystem backend binds POST /file-upload in every filesystem-enabled deployment. The handler takes an attacker-supplied absolute path from the multipart uri field and calls fs.movetmp, target, overwrite: true with no workspace...

Directory Traversal

Overview ghost is a publishing platform Affected versions of this package are vulnerable to Directory Traversal through the theme upload validation in services/themes/storage.js and LocalStorageBase.ts. An attacker can write files outside the uploads directory by uploading a custom theme with a...

NPM: Ghost: Theme Upload Path Traversal

NPM: Ghost: Theme Upload Path Traversal vulnerability discovered by ? in WordPress Npm ghost versions = 0.10.0, 6.54.1...

CVE-2026-70593

CVE-2026-70593 affects Ghost (Node.js) versions 0.10.0–6.54.1. A vulnerability in custom themes allows a staff user to write files outside the uploads directory via path traversal in LocalStorageBase and theme storage name handling, enabling modification of installation behavior. The issue is fix...

CVE-2026-70593 Ghost: Theme Upload Path Traversal

Ghost is a Node.js content management system. From 0.10.0 until 6.54.1, a vulnerability in custom themes allowed a staff user to write files outside of the uploads directory. This could be used to alter the behavior of the installation through custom theme upload path traversal in LocalStorageBas...