17466 matches found
Exploit for CVE-2024-56264
CVE-2024-56264 WordPress ACF City Selector - Arbitrary Fil...
WordPress Everest Forms plugin <= 3.0.9.4 - Unauthenticated Arbitrary File Upload, Read, and Deletion vulnerability
Unauthenticated Arbitrary File Upload, Read, and Deletion vulnerability discovered by Arkadiusz Hydzik in WordPress Plugin Everest Forms versions = 3.0.9.4...
Exploit for CVE-2024-9698
CVE-2024-9698 Crafthemes Demo Import " 🔥 Example O...
CVE-2025-25766
An arbitrary file upload vulnerability in the component /file/savefile.do of MRCMS v3.1.2 allows attackers to execute arbitrary code via uploading a crafted .jsp file...
CVE-2025-26776 WordPress Chaty Pro Plugin <= 3.3.3 - Arbitrary File Upload vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in NotFound Chaty Pro allows Upload a Web Shell to a Web Server. This issue affects Chaty Pro: from n/a through 3.3.3...
WordPress WPvivid plugin <= 0.9.112 - Authenticated (Admin+) Arbitrary File Upload via wpvivid_upload_file vulnerability
Authenticated Admin+ Arbitrary File Upload via wpvividuploadfile vulnerability discovered by Ryan Kozak in WordPress Plugin WPvivid Backup and Migration versions = 0.9.112...
CVE-2024-13869
The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'uploadfiles' function in all versions up to, and including, 0.9.112. This makes it possible for authenticated attackers, with...
CVE-2024-13869 Migration, Backup, Staging – WPvivid <= 0.9.112 - Authenticated (Admin+) Arbitrary File Upload via wpvivid_upload_file
The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'uploadfiles' function in all versions up to, and including, 0.9.112. This makes it possible for authenticated attackers, with...
CVE-2024-13869
CVE-2024-13869 affects Migration, Backup, Staging – WPvivid Backup & Migration for WordPress. Wordfence notes a vulnerability in the wpvivid_upload_file path that allows an authenticated attacker with Admin+ privileges to upload arbitrary files, enabling potential remote code execution. Versions ...
WordPress plugin WPvivid Backup & Migration has a security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...
PT-2025-7399
Name of the Vulnerable Software and Affected Versions Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress versions up to, and including, 0.9.112 Description The issue is related to arbitrary file uploads due to missing file type validation in the upload files function. Th...
CVE-2024-13869: Unrestricted Upload of File with Dangerous Type
The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'uploadfiles' function in all versions up to, and including, 0.9.112. This makes it possible for authenticated attackers, with...
CVE-2025-25766
An arbitrary file upload vulnerability in the component /file/savefile.do of MRCMS v3.1.2 allows attackers to execute arbitrary code via uploading a crafted .jsp file...
CVE-2025-25766: Improper Neutralization of Special Elements used in a Command
An arbitrary file upload vulnerability in the component /file/savefile.do of MRCMS v3.1.2 allows attackers to execute arbitrary code via uploading a crafted .jsp file...
CVE-2025-25766
An arbitrary file upload vulnerability in the component /file/savefile.do of MRCMS v3.1.2 allows attackers to execute arbitrary code via uploading a crafted .jsp file...
CVE-2025-25766
An arbitrary file upload vulnerability in the component /file/savefile.do of MRCMS v3.1.2 allows attackers to execute arbitrary code via uploading a crafted .jsp file...
WordPress Theme File Duplicator Plugin <= 1.3 - Arbitrary File Upload vulnerability
Arbitrary File Upload vulnerability discovered by LVT-tholv2k in WordPress Plugin Theme File Duplicator versions = 1.3...
MRCMS security vulnerabilities
MRCMS is a content management system by the individual developers of marker. A security vulnerability exists in MRCMS version v3.1.2, which stems from the /file/savefile.do module containing an arbitrary file upload vulnerability...
CVE-2025-25766
The content management system MRCMS version 3.1.2 is susceptible to an arbitrary file upload vulnerability in the /file/savefile.do component. Attackers can exploit this by uploading a crafted .jsp file to execute arbitrary code. While no patch is currently available, it is recommended to restric...