CVE-2026-27064

CVE-2026-27064 affects the WordPress Mailster plugin, versions

CVE-2026-27064 WordPress Mailster plugin <= 4.1.17 - Arbitrary File Upload vulnerability

Editor Arbitrary File Upload in Mailster = 4.1.17 versions...

EUVD-2026-48151

Editor Arbitrary File Upload in Mailster = 4.1.17 versions...

CVE-2026-14282

The GoDAM – Organize WordPress Media Library & File Manager with Unlimited Folders for Images, Videos & more plugin for WordPress is vulnerable to arbitrary file uploads in versions up to, and including, 1.12.2. This is due to insufficient file type validation in the savevideofile function hooked...

Exploit for CVE-2026-13001

CVE-2026-13001 Podlove Podcast Publisher CVSS 9.8 Crit...

CVE-2026-14282

The GoDAM – Organize WordPress Media Library & File Manager with Unlimited Folders for Images, Videos & more plugin for WordPress is vulnerable to arbitrary file uploads in versions up to, and including, 1.12.2. This is due to insufficient file type validation in the savevideofile function hooked...

CVE-2026-14282 GoDAM <= 1.12.2 - Unauthenticated Arbitrary File Upload via WPForms File Upload Field

The GoDAM – Organize WordPress Media Library & File Manager with Unlimited Folders for Images, Videos & more plugin for WordPress is vulnerable to arbitrary file uploads in versions up to, and including, 1.12.2. This is due to insufficient file type validation in the savevideofile function hooked...

CVE-2026-14282 GoDAM <= 1.12.2 - Unauthenticated Arbitrary File Upload via WPForms File Upload Field

The GoDAM – Organize WordPress Media Library & File Manager with Unlimited Folders for Images, Videos & more plugin for WordPress is vulnerable to arbitrary file uploads in versions up to, and including, 1.12.2. This is due to insufficient file type validation in the savevideofile function hooked...

CVE-2026-14282

The CVE describes a vulnerability in the GoDAM WordPress plugin (versions up to and including 1.12.2) where an insufficient file type validation in save_video_file() (hooked to WPForms process) trusts the attacker-controlled Content-Type header, preserves the original filename via wp_unique_filen...

PT-2026-63809

Editor Arbitrary File Upload in Mailster = 4.1.17 versions...

CVE-2026-27064: Unrestricted Upload of File with Dangerous Type

Editor Arbitrary File Upload in Mailster = 4.1.17 versions...

CVE-2026-65461: Unrestricted Upload of File with Dangerous Type

Administrator Arbitrary File Upload in Really Simple CSV Importer = 1.3 versions...

PT-2026-63883

Administrator Arbitrary File Upload in Really Simple CSV Importer = 1.3 versions...

CVE-2026-65455: Unrestricted Upload of File with Dangerous Type

Administrator Arbitrary File Upload in MapSVG = 8.14.0 versions...

PT-2026-63878

Administrator Arbitrary File Upload in MapSVG = 8.14.0 versions...

CVE-2026-14282: Unrestricted Upload of File with Dangerous Type

The GoDAM – Organize WordPress Media Library & File Manager with Unlimited Folders for Images, Videos & more plugin for WordPress is vulnerable to arbitrary file uploads in versions up to, and including, 1.12.2. This is due to insufficient file type validation in the savevideofile function hooked...

WordPress Mailster plugin <= 4.1.17 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Phat RiO in WordPress Plugin Mailster versions = 4.1.17...

WordPress Really Simple CSV Importer plugin <= 1.3 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Really Simple CSV Importer versions = 1.3...

WordPress MapSVG plugin <= 8.14.0 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Securepeak Research Team in WordPress Plugin MapSVG versions = 8.14.0...

CVE-2026-63048

Joomla Extension - joomlack.fr - Improper access control in Page Builder CK 1.0.0-3.1.2, 3.4.0-3.4.11, 3.5.0-3.6.2 - The Joomla extension Page Builder CK is vulnerable to an authenticated arbitrary file upload, leading to RCE...