CVE-2025-29405

An arbitrary file upload vulnerability in the component /admin/template.php of emlog pro 2.5.0 and pro 2.5. allows attackers to execute arbitrary code via uploading a crafted PHP file...

emlog security vulnerabilities

emlog is emlog open source a set of PHP and MySQL based CMS website building system. A security vulnerability exists in emlog pro version v2.5.7, which stems from an arbitrary file upload issue in the /views/plugin.php component that could lead to the execution of arbitrary code...

emlog security vulnerabilities

emlog is emlog open source a set of PHP and MySQL based CMS website builder . A security vulnerability exists in emlog pro 2.5.0 and pro 2.5. versions, which stems from an arbitrary file upload issue in the /admin/template.php component that could lead to the execution of arbitrary code...

VulnCheck KEV: CVE-2024-8856

The Backup and Staging by WP Time Capsule plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the the UploadHandler.php file and no direct file access prevention in all versions up to, and including, 1.22.21. This makes it possible for unauthenticat...

CVE-2025-29401

An arbitrary file upload vulnerability in the component /views/plugin.php of emlog pro v2.5.7 allows attackers to execute arbitrary code via uploading a crafted PHP file...

PT-2025-11693 · Emlog Pro · Emlog Pro

Name of the Vulnerable Software and Affected Versions: emlog pro version 2.5.7 Description: An arbitrary file upload vulnerability in the component /views/plugin.php of emlog pro allows attackers to execute arbitrary code via uploading a crafted PHP file. The vulnerability is located in the...

CVE-2025-29405: Unrestricted Upload of File with Dangerous Type

An arbitrary file upload vulnerability in the component /admin/template.php of emlog pro 2.5.0 and pro 2.5. allows attackers to execute arbitrary code via uploading a crafted PHP file...

CVE-2025-29401

An arbitrary file upload vulnerability in the component /views/plugin.php of emlog pro v2.5.7 allows attackers to execute arbitrary code via uploading a crafted PHP file...

CVE-2025-29405

An arbitrary file upload vulnerability in the component /admin/template.php of emlog pro 2.5.0 and pro 2.5. allows attackers to execute arbitrary code via uploading a crafted PHP file...

VulnCheck KEV: CVE-2023-6925

The Unlimited Addons for WPBakery Page Builder plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation on the 'importZipFile' function in versions up to, and including, 1.0.42. This makes it possible for authenticated attackers with a role that the...

CVE-2025-29401

The emlog pro CMS (version 2.5.7 ) contains an arbitrary file upload vulnerability within the /views/plugin.php component. This flaw allows an unauthenticated attacker to execute arbitrary code by uploading a crafted PHP file . The vulnerability is categorized under CWE-94 (Improper Control of Ge...

CVE-2025-29405

An arbitrary file upload vulnerability in the component /admin/template.php of emlog pro 2.5.0 and pro 2.5. allows attackers to execute arbitrary code via uploading a crafted PHP file...

CVE-2025-29405

The emlog pro CMS (versions 2.5.0 and 2.5. *) contains an arbitrary file upload vulnerability in the /admin/template.php component. This flaw allows an attacker to upload a crafted PHP file , which can lead to arbitrary code execution on the target system. To mitigate this risk, it is recommended...

PT-2025-11709 · Emlog Pro · Emlog Pro

Name of the Vulnerable Software and Affected Versions: emlog pro versions 2.5.0 through 2.5. Description: An arbitrary file upload vulnerability in the component /admin/template.php allows attackers to execute arbitrary code via uploading a crafted PHP file. The vulnerability is exploited through...

VulnCheck KEV: CVE-2023-2359

The Slider Revolution WordPress plugin through 6.6.12 does not check for valid image files upon import, leading to an arbitrary file upload which may be escalated to Remote Code Execution in some server configurations...

CVE-2025-29401: Improper Control of Generation of Code

An arbitrary file upload vulnerability in the component /views/plugin.php of emlog pro v2.5.7 allows attackers to execute arbitrary code via uploading a crafted PHP file...

CVE-2025-24801

GLPI is a free asset and IT management software package. An authenticated user can upload and force the execution of .php files located on the GLPI server. This vulnerability is fixed in 10.0.18...

Exploit for CVE-2024-56249

🛠️ WordPress Master Toolkit Exploit CVE-2024-56249 🌟 Ove...

FlowiseAI Arbitrary File Upload

Flowise is vulnerable to an attack allowing an unauthenticated attacker to upload an arbitrary file. This detection is included in the AI and LLM category. Note that this plugin requires the 'File Upload' assessment option enabled in the scan configuration. No source data...

CVE-2025-2396

The U-Office Force from e-Excellence has an Arbitrary File Upload vulnerability, allowing remote attackers with regular privileges to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...