Lucene search
K

2172 matches found

OSV
OSV
added 2024/11/04 2:15 p.m.1 views

CVE-2024-50523

Unrestricted Upload of File with Dangerous Type vulnerability in RainbowLink Inc. All Post Contact Form allows Upload a Web Shell to a Web Server.This issue affects All Post Contact Form: from n/a through 1.7.3...

9.8CVSS5.8AI score0.00888EPSS
Exploits0References1
NVD
NVD
added 2024/11/04 2:15 p.m.12 views

CVE-2024-50523

Unrestricted Upload of File with Dangerous Type vulnerability in RainbowLink Inc. All Post Contact Form allpost-contactform allows Upload a Web Shell to a Web Server.This issue affects All Post Contact Form: from n/a through = 1.8.2...

10CVSS0.00888EPSS
Exploits0References1
NVD
NVD
added 2024/11/04 2:15 p.m.21 views

CVE-2024-50525

Unrestricted Upload of File with Dangerous Type vulnerability in helloprint Helloprint helloprint allows Upload a Web Shell to a Web Server.This issue affects Helloprint: from n/a through = 2.0.4...

10CVSS0.01232EPSS
Exploits0References1
OSV
OSV
added 2024/11/04 2:15 p.m.0 views

CVE-2024-50525

Unrestricted Upload of File with Dangerous Type vulnerability in Helloprint Plug your WooCommerce into the largest catalog of customized print products from Helloprint allows Upload a Web Shell to a Web Server.This issue affects Plug your WooCommerce into the largest catalog of customized print...

9.8CVSS5.8AI score0.01232EPSS
Exploits0References1
CVE
CVE
added 2024/11/04 1:46 p.m.50 views

CVE-2024-50523

The CVE-2024-50523 entry documents an Unrestricted Upload of File with Dangerous Type vulnerability in the WordPress plugin All Post Contact Form, allowing an unauthenticated attacker to upload a web shell to the target server. Affected versions include

10CVSS5.9AI score0.00888EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2024/11/04 1:44 p.m.40 views

CVE-2024-50525

CVE-2024-50525 concerns the WordPress Helloprint plugin (Plug your WooCommerce into the largest catalog of customized print products from Helloprint) with vulnerable versions reported as

10CVSS5.9AI score0.01232EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2024/11/04 1:43 p.m.61 views

CVE-2024-50526

CVE-2024-50526 affects the WordPress plugin Multi Purpose Mail Form (mahlamusa) versions n/a through 1.0.2, due to an unrestricted upload of dangerous file types that can lead to remote code execution. An unauthenticated, pre-authentication 0-click exploit exists (GitHub PoC) and demonstrates arb...

10CVSS5.9AI score0.01142EPSS
Exploits2References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/11/04 1:43 p.m.10 views

CVE-2024-50526 WordPress Multi Purpose Mail Form plugin <= 1.0.2 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Lindeni Mahlalela Multi Purpose Mail Form multi-purpose-mail-form allows Upload a Web Shell to a Web Server.This issue affects Multi Purpose Mail Form: from n/a through = 1.0.2...

10CVSS5.9AI score0.01142EPSS
Exploits2References1
Cvelist
Cvelist
added 2024/11/04 1:43 p.m.25 views

CVE-2024-50526 WordPress Multi Purpose Mail Form plugin <= 1.0.2 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Lindeni Mahlalela Multi Purpose Mail Form multi-purpose-mail-form allows Upload a Web Shell to a Web Server.This issue affects Multi Purpose Mail Form: from n/a through = 1.0.2...

10CVSS0.01142EPSS
Exploits2References1
Cvelist
Cvelist
added 2024/11/04 1:41 p.m.18 views

CVE-2024-50529 WordPress Training – Courses plugin <= 2.0.1 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in rudrainn Training – Courses training allows Upload a Web Shell to a Web Server.This issue affects Training – Courses: from n/a through = 2.0.1...

9.9CVSS0.00889EPSS
Exploits0References1
CVE
CVE
added 2024/11/04 1:41 p.m.51 views

CVE-2024-50529

CVE-2024-50529 – WordPress Training – Courses plugin : Unrestricted upload of files with dangerous types in Training – Courses versions

9.9CVSS5.9AI score0.00889EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/11/04 1:40 p.m.19 views

CVE-2024-50530 WordPress Stars SMTP Mailer plugin <= 2.2.1 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Myriad Solutionz Stars SMTP Mailer stars-smtp-mailer allows Upload a Web Shell to a Web Server.This issue affects Stars SMTP Mailer: from n/a through = 2.2.1...

9.9CVSS0.00889EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/11/04 1:40 p.m.9 views

CVE-2024-50530 WordPress Stars SMTP Mailer plugin <= 2.2.1 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Myriad Solutionz Stars SMTP Mailer stars-smtp-mailer allows Upload a Web Shell to a Web Server.This issue affects Stars SMTP Mailer: from n/a through = 2.2.1...

9.9CVSS5.9AI score0.00889EPSS
Exploits0References1
CVE
CVE
added 2024/11/04 1:39 p.m.49 views

CVE-2024-50531

The CVE-2024-50531 entry concerns RSVPMaker for Toastmasters (WordPress plugin). Connected sources confirm an Unrestricted Upload of File with Dangerous Type vulnerability in RSVPMaker for Toastmasters, affecting versions up to 6.2.4, with unauthenticated attackers able to upload a web shell to t...

10CVSS5.9AI score0.00888EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/11/04 1:39 p.m.11 views

CVE-2024-50531 WordPress RSVPMaker for Toastmasters plugin <= 6.2.4 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in davidfcarr RSVPMaker for Toastmasters rsvpmaker-for-toastmasters allows Upload a Web Shell to a Web Server.This issue affects RSVPMaker for Toastmasters: from n/a through = 6.2.4...

10CVSS5.9AI score0.00888EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/11/04 12:0 a.m.6 views

PT-2024-34303

Name of the Vulnerable Software and Affected Versions: Multi Purpose Mail Form versions n/a through 1.0.2 Description: The issue allows users to upload dangerous files, potentially leading to a web server compromise by uploading a web shell. This can happen due to an unrestricted upload of file...

10CVSS5.2AI score0.01142EPSS
Exploits2References11
Positive Technologies
Positive Technologies
added 2024/11/04 12:0 a.m.2 views

PT-2024-34300 · Unknown · All Post Contact Form

Name of the Vulnerable Software and Affected Versions: All Post Contact Form versions 1.7.3 and earlier Description: The issue affects the All Post Contact Form, allowing an unrestricted upload of files with dangerous types, such as a web shell, to a web server. This enables attackers to compromi...

10CVSS7AI score0.00888EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2024/11/04 12:0 a.m.2 views

PT-2024-34306 · Unknown · Rudra Innovative Software Training – Courses

Name of the Vulnerable Software and Affected Versions: Rudra Innovative Software Training – Courses versions prior to 2.0.1 Description: The issue allows unauthorized upload of malicious files, specifically a web shell, to a web server. This poses a significant risk to the security of the web...

9.9CVSS7.3AI score0.00889EPSS
Exploits0References9
Positive Technologies
Positive Technologies
added 2024/11/04 12:0 a.m.2 views

PT-2024-34308 · Myriad Solutionz · Myriad Solutionz Stars Smtp Mailer

Name of the Vulnerable Software and Affected Versions: Myriad Solutionz Stars SMTP Mailer versions 1.7 and earlier Description: The issue allows an attacker to upload a web shell to a web server, potentially leading to harmful consequences. This is due to an Unrestricted Upload of File with...

9.9CVSS7.2AI score0.00889EPSS
Exploits0References8
CNNVD
CNNVD
added 2024/11/04 12:0 a.m.2 views

WordPress plugin All Post Contact Form 代码问题漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in...

10CVSS6.6AI score0.00888EPSS
Exploits0References1
Rows per page
Query Builder