17476 matches found
CVE-2025-0394 Groundhogg <= 3.7.3.5 - Authenticated (Author+) Arbitrary File Upload via gh_big_file_upload Function
The WordPress CRM, Email & Marketing Automation for WordPress | Award Winner — Groundhogg plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ghbigfileupload function in all versions up to, and including, 3.7.3.5. This makes it possible for...
CVE-2025-0394 Groundhogg <= 3.7.3.5 - Authenticated (Author+) Arbitrary File Upload via gh_big_file_upload Function
The WordPress CRM, Email & Marketing Automation for WordPress | Award Winner — Groundhogg plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ghbigfileupload function in all versions up to, and including, 3.7.3.5. This makes it possible for...
PT-2025-1063 · Unknown · Websoft Hcm
Name of the Vulnerable Software and Affected Versions: Websoft HCM affected versions not specified Description: The issue is related to the Websoft HCM software, which has a vulnerability associated with arbitrary file upload. This could allow a remote attacker to execute arbitrary code by creati...
CVE-2024-57761
An arbitrary file upload vulnerability in the parserXML method of JeeWMS before v2025.01.01 allows attackers to execute arbitrary code via uploading a crafted file...
4ECPS Web Forms <= 0.2.18 - Unauthenticated Arbitrary File Upload
Description The 4ECPS Web Forms plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 0.2.18. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may mak...
CVE-2024-57761
The JeeWMS warehouse management system (a JAVA-based system from China Huayi) is vulnerable to an arbitrary file upload vulnerability in the parserXML() method. This flaw affects versions prior to v2025.01.01 and allows an attacker to execute arbitrary code by uploading a specially crafted file. ...
CVE-2024-57761
An arbitrary file upload vulnerability in the parserXML method of JeeWMS before v2025.01.01 allows attackers to execute arbitrary code via uploading a crafted file...
CVE-2025-0394: Unrestricted Upload of File with Dangerous Type
The WordPress CRM, Email & Marketing Automation for WordPress | Award Winner — Groundhogg plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ghbigfileupload function in all versions up to, and including, 3.7.3.5. This makes it possible for...
PT-2025-3555 · Jeewms · Jeewms
Name of the Vulnerable Software and Affected Versions: JeeWMS versions prior to 2025.01.01 Description: The issue is related to an arbitrary file upload vulnerability in the parserXML method. This allows attackers to execute arbitrary code via uploading a crafted file. There is no information...
CVE-2024-57761
An arbitrary file upload vulnerability in the parserXML method of JeeWMS before v2025.01.01 allows attackers to execute arbitrary code via uploading a crafted file...
PT-2025-3865 · WordPress · Groundhogg
Name of the Vulnerable Software and Affected Versions: Groundhogg plugin for WordPress versions up to, and including, 3.7.3.5 Description: The issue is related to the lack of file type validation in the gh big file upload function, which allows authenticated attackers with Author-level access and...
WordPress Groundhogg plugin <= 3.7.3.5 - Authenticated (Author+) Arbitrary File Upload via gh_big_file_upload Function vulnerability
Authenticated Author+ Arbitrary File Upload via ghbigfileupload Function vulnerability discovered by wesley wcraft in WordPress Plugin Groundhogg versions = 3.7.3.5...
CVE-2024-46479
Venki Supravizio BPM through 18.0.1 was discovered to contain an arbitrary file upload vulnerability. An authenticated attacker may upload a malicious file, leading to remote code execution...
PT-2025-2735
Name of the Vulnerable Software and Affected Versions: Venki Supravizio BPM versions up to 18.0.1 Description: The issue is related to an arbitrary file upload vulnerability. An authenticated attacker may upload a malicious file, which can lead to remote code execution. Recommendations: For...
CVE-2024-46479
Venki Supravizio BPM through 18.0.1 was discovered to contain an arbitrary file upload vulnerability. An authenticated attacker may upload a malicious file, leading to remote code execution...
CVE-2024-46479: Unrestricted Upload of File with Dangerous Type
Venki Supravizio BPM through 18.0.1 was discovered to contain an arbitrary file upload vulnerability. An authenticated attacker may upload a malicious file, leading to remote code execution...
CVE-2024-46479
CVE-2024-46479 affects Venki Supravizio BPM up to version 18.0.1, which contains an arbitrary file upload vulnerability that could allow an authenticated attacker to upload a malicious file and achieve remote code execution. Connected sources confirm the component and impact; no remediation detai...
Exploit for CVE-2024-9932
CVE-2024-9932-POC Description: The Wux Blog Editor WordPre...