Lucene search
K

2170 matches found

CNNVD
CNNVD
added 2025/09/05 12:0 a.m.1 views

WordPress plugin Bulk Featured Image 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists i...

9.1CVSS6.8AI score0.00096EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/09/05 12:0 a.m.2 views

PT-2025-36158

Name of the Vulnerable Software and Affected Versions: CreedAlly Bulk Featured Image versions through 1.2.2 Description: The Bulk Featured Image plugin contains a vulnerability that allows for the unrestricted upload of files with dangerous types, potentially enabling the upload of a web shell to...

9.1CVSS6.6AI score0.00096EPSS
Exploits0References7
RedhatCVE
RedhatCVE
added 2025/09/02 4:13 a.m.3 views

CVE-2025-31100

Unrestricted Upload of File with Dangerous Type vulnerability in Mojoomla School Management allows Upload a Web Shell to a Web Server.This issue affects School Management: from n/a through 1.93.1 02-07-2025...

9.9CVSS5.2AI score0.00104EPSS
Exploits0References1
CNVD
CNVD
added 2025/09/02 12:0 a.m.1 views

WordPress Mojoomla School Management plugin file upload vulnerability

WordPress Mojoomla School Management plugin is a WordPress plugin mainly used for school management system, support class management, student attendance, grade management, fee collection and other functions. WordPress Mojoomla School Management plugin has a file upload vulnerability, which stems...

9.9CVSS7AI score0.00104EPSS
Exploits0References1
NVD
NVD
added 2025/08/31 4:15 a.m.1 views

CVE-2025-31100

Unrestricted Upload of File with Dangerous Type vulnerability in Mojoomla School Management allows Upload a Web Shell to a Web Server.This issue affects School Management: from n/a through 1.93.1 02-07-2025...

9.9CVSS0.00104EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/08/31 3:48 a.m.5 views

CVE-2025-31100 WordPress School Management Plugin <= 1.93.1 (02-07-2025) - Arbitrary File Upload Vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Mojoomla School Management allows Upload a Web Shell to a Web Server.This issue affects School Management: from n/a through 1.93.1 02-07-2025...

9.9CVSS0.00104EPSS
Exploits0References1
CVE
CVE
added 2025/08/31 3:48 a.m.14 views

CVE-2025-31100

CVE-2025-31100 relates to an unrestricted file upload vulnerability in the WordPress/“Mojoomla” School Management plugin. The issue allows uploading a Web Shell to the web server and affects versions n/a through 1.93.1 (02-07-2025). The root cause is an unrestricted upload of dangerous file types...

9.9CVSS5.2AI score0.00104EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/08/31 12:0 a.m.3 views

WordPress plugin Mojoomla School Management 代码问题漏洞

WordPress Mojoomla School Management plugin is a WordPress plugin mainly used for school management system, support class management, student attendance, grade management, fee collection and other functions. WordPress Mojoomla School Management plugin has a file upload vulnerability, which stems...

9.9CVSS7AI score0.00104EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/08/31 12:0 a.m.3 views

PT-2025-35387

Name of the Vulnerable Software and Affected Versions: Mojoomla School Management versions n/a through 1.93.1 Description: A flaw exists in Mojoomla School Management that allows for unrestricted file uploads, potentially enabling attackers to upload web shells to a web server. This could lead to...

9.9CVSS6.2AI score0.00104EPSS
Exploits0References9
RedhatCVE
RedhatCVE
added 2025/08/30 6:18 p.m.2 views

CVE-2025-49387

Unrestricted Upload of File with Dangerous Type vulnerability in add-ons.org Drag and Drop File Upload for Elementor Forms drag-and-drop-file-upload-for-elementor-forms allows Upload a Web Shell to a Web Server.This issue affects Drag and Drop File Upload for Elementor Forms: from n/a through =...

10CVSS5.9AI score0.00216EPSS
Exploits0References1
NVD
NVD
added 2025/08/28 1:15 p.m.3 views

CVE-2025-49387

Unrestricted Upload of File with Dangerous Type vulnerability in add-ons.org Drag and Drop File Upload for Elementor Forms drag-and-drop-file-upload-for-elementor-forms allows Upload a Web Shell to a Web Server.This issue affects Drag and Drop File Upload for Elementor Forms: from n/a through =...

10CVSS0.00216EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/08/28 12:37 p.m.1 views

CVE-2025-49387 WordPress Drag and Drop File Upload for Elementor Forms Plugin <= 1.5.3 - Arbitrary File Upload Vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in add-ons.org Drag and Drop File Upload for Elementor Forms allows Upload a Web Shell to a Web Server. This issue affects Drag and Drop File Upload for Elementor Forms: from n/a through 1.5.3...

10CVSS6.3AI score0.00216EPSS
Exploits0References1
CVE
CVE
added 2025/08/28 12:37 p.m.22 views

CVE-2025-49387

CVE-2025-49387 : Unrestricted Upload of File with Dangerous Type in the WordPress plugin “Drag and Drop File Upload for Elementor Forms” (

10CVSS5.9AI score0.00216EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/08/28 12:37 p.m.8 views

CVE-2025-49387 WordPress Drag and Drop File Upload for Elementor Forms Plugin <= 1.5.3 - Arbitrary File Upload Vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in add-ons.org Drag and Drop File Upload for Elementor Forms drag-and-drop-file-upload-for-elementor-forms allows Upload a Web Shell to a Web Server.This issue affects Drag and Drop File Upload for Elementor Forms: from n/a through =...

10CVSS0.00216EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/08/28 12:0 a.m.1 views

WordPress plugin Drag and Drop File Upload for Elementor Forms 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

10CVSS6.9AI score0.00216EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2022-31087

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LDAP Account Manager LAM is a webfrontend for managing entries e.g. users, groups, DHCP settings stored in an LDAP directory. In versions prior to 8.0 the tmp...

7.8CVSS7.1AI score0.00191EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/08/23 3:10 p.m.3 views

CVE-2025-53251

Unrestricted Upload of File with Dangerous Type vulnerability in An-Themes Pin WP pin-wp allows Upload a Web Shell to a Web Server.This issue affects Pin WP: from n/a through 7.2...

9.9CVSS5.9AI score0.00113EPSS
Exploits0References1
NVD
NVD
added 2025/08/21 3:15 p.m.5 views

CVE-2025-53251

Unrestricted Upload of File with Dangerous Type vulnerability in An-Themes Pin WP pin-wp allows Upload a Web Shell to a Web Server.This issue affects Pin WP: from n/a through 7.2...

9.9CVSS0.00113EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/08/21 2:43 p.m.12 views

CVE-2025-53251 WordPress Pin WP theme < 7.2 - Arbitrary File Upload Vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in An-Themes Pin WP pin-wp allows Upload a Web Shell to a Web Server.This issue affects Pin WP: from n/a through 7.2...

9.9CVSS0.00113EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/08/21 2:43 p.m.4 views

CVE-2025-53251 WordPress Pin WP theme <= 6.9 - Arbitrary File Upload Vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in An-Themes Pin WP allows Upload a Web Shell to a Web Server.This issue affects Pin WP: from n/a through 6.9...

9.9CVSS6.4AI score0.00113EPSS
Exploits0References1
Rows per page
Query Builder