17464 matches found
PT-2025-17439
Name of the Vulnerable Software and Affected Versions MCMS version 5.4.3 Description An arbitrary file upload vulnerability in the ueditor component of MCMS allows attackers to execute arbitrary code via uploading a crafted file. Recommendations For MCMS version 5.4.3, consider disabling the...
CVE-2025-29287
MCMS version v5.4.3 contains an arbitrary file upload vulnerability within the ueditor component. This flaw allows an attacker to execute arbitrary code by uploading a specially crafted file. To mitigate this risk, it is recommended to disable the ueditor component until a formal patch is release...
CVE-2025-29287: Unrestricted Upload of File with Dangerous Type
An arbitrary file upload vulnerability in the ueditor component of MCMS v5.4.3 allows attackers to execute arbitrary code via uploading a crafted file...
CVE-2025-29287
An arbitrary file upload vulnerability in the ueditor component of MCMS v5.4.3 allows attackers to execute arbitrary code via uploading a crafted file...
CVE-2021-4455 Wordpress Plugin Smart Product Review <= 1.0.4 - Unauthenticated Arbitrary File Upload
The Wordpress Plugin Smart Product Review plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 1.0.4. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server whic...
CVE-2025-1093
The AIHub theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the generateimage function in all versions up to, and including, 1.3.7. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which m...
CVE-2025-1093 AIHub <= 1.3.7 - Unauthenticated Arbitrary File Upload in generate_image
The AIHub theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the generateimage function in all versions up to, and including, 1.3.7. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which m...
CVE-2025-1093
CVE-2025-1093 affects the AIHub WordPress Theme (AI Hub - Startup & Technology WordPress Theme). Unauthenticated arbitrary file upload is possible due to missing file-type validation in the generate_image function in all versions up to 1.3.7, potentially enabling remote code execution. Red Hat co...
CVE-2025-1093 AIHub <= 1.3.7 - Unauthenticated Arbitrary File Upload in generate_image
The AIHub theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the generateimage function in all versions up to, and including, 1.3.7. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which m...
Exploit for Unrestricted Upload of File with Dangerous Type in Wpswings Woocommerce_Ultimate_Gift_Card
Wordpress WooCommerce Ultimate Gift Card = 2.6.0 - Unauthenti...
WordPress Wordpress Plugin Smart Product Review plugin <= 1.0.4 - Unauthenticated Arbitrary File Upload vulnerability
Unauthenticated Arbitrary File Upload vulnerability discovered by Keyvan Hardani in WordPress Plugin Smart Product Review versions = 1.0.4...
CVE-2021-4455: Unrestricted Upload of File with Dangerous Type
The Wordpress Plugin Smart Product Review plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 1.0.4. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server whic...
CVE-2025-1093: Unrestricted Upload of File with Dangerous Type
The AIHub theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the generateimage function in all versions up to, and including, 1.3.7. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which m...
PT-2025-17353 · WordPress · Aihub
Name of the Vulnerable Software and Affected Versions: AIHub theme for WordPress versions up to, and including, 1.3.7 Description: The AIHub theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the generate image function. This makes it possible for...
PT-2025-17369 · WordPress · Smart Product Review
Name of the Vulnerable Software and Affected Versions: Smart Product Review plugin for WordPress versions up to, and including, 1.0.4 Description: The Smart Product Review plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation. This makes it possible for...
Exploit for CVE-2025-32682
🐚 CVE-2025-32682 - Arbitrary File Upload in MapSVG Lite --...
CVE-2024-40070
Sourcecodester Online ID Generator System 1.0 was discovered to contain an arbitrary file upload vulnerability via idgenerator/classes/Users.php?f=save. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...
CVE-2024-40071
Sourcecodester Online ID Generator System 1.0 was discovered to contain an arbitrary file upload vulnerability via idgenerator/classes/SystemSettings.php?f=updatesettings. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...
📄 WordPress MapSVG Lite 8.5.34 Shell Upload
WordPress MapSVG Lite plugin versions 8.5.34 and below suffer from a remote shell upload vulnerability. 🐚 CVE-2025-32682 - Arbitrary File Upload in MapSVG Lite = 8.5.34 📌 Plugin Details - Name: MapSVG Lite - Affected Version: = 8.5.34 - Vulnerability Type: Arbitrary File Upload - CVE ID:...