CVE-2025-6586

Download Plugin 1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo validlft forever preferredlft forever inet6 ::1/128 scope host validlft forever preferredlft forever 2: eth0: mtu 1500 qdisc...

CVE-2025-6220

Ultimate Addons per Contact Form 7 1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo validlft forever preferredlft forever inet6 ::1/128 scope host validlft forever preferredlft forever 2: eth0...

CVE-2025-5961

CVE-2025-5961 Migrazione, Backup, Staging – WPvivid Backup & Migration 1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo validlft forever preferredlft forever inet6 ::1/128 scope host validlft...

CVE-2025-4336

eMagicOne Store Manager per WooCommerce 1: lo: mtu 65536 qdisc noqueue state UNKNOWN group...

CVE-2023-39115

CVE-2023-39115 Descrição: O Campcodes Online Matrimonial Website System Script v3.3 é vulnerável a uma vulnerabilidade de upload de arquivo arbitrário, potencialmente permitindo que atacantes executem código arbitrário no servidor alvo. A vulnerabilidade surge de validação insuficiente de arquivo...

CVE-2026-13157

CVE-2026-13157 Theme Demo Import = 1.1.3 — Caricamento Arbitrario di File & Esecuzione di Codice Remota -E5A500?style=for-the-badge&logo=security&logoColor=white 📖 Panoramica dell'Advisory CVE-2026-13157 è una vulnerabilità autenticata di caricamento arbitrario di file che colpisce il plugin...

CVE-2022-32060

Snipe-IT Versione v6.0.2 Spiegazione della vulnerabilità: Una vulnerabilità di upload arbitrario di file nel componente Update Branding Settings di Snipe-IT v6.0.2 consente agli attaccanti di eseguire codice arbitrario tramite un file appositamente predisposto. Vettori di attacco: Abbiamo trovato...

CVE-2025-6440

CVE-2025-6440 WooCommerce Designer Pro = 1.9.26 - Caricamento Arbitrario di File Non Autenticato Descrizione Il plugin WooCommerce Designer Pro per WordPress, utilizzato dal tema WordPress Pricom - Printing Company & Design Services, è vulnerabile a caricamenti arbitrari di file a causa della...

CVE-2025-3515

CVE-2025-3515 CVE‑2025‑3515 — Caricamento multiplo di file tramite drag and drop per Contact Form 7 Descrizione: Caricamento arbitrario di file tramite drag‑and‑drop‑multiple‑file‑upload‑contact‑form‑7 ≤1.3.8.9 consente il caricamento di file .phar, portando all'esecuzione remota di codice in...

EUVD-2026-65164

Subscriber Arbitrary File Upload in UltimateAI = 3.1.0 versions...

CVE-2021-40964

Tiny File Manager = 2.4.6 - Esecuzione Remota di Codice Autenticato 🚨 Informazioni sull'Exploit Questo è un exploit Esecuzione Remota di Codice RCE autenticato basato su Bash per Tiny File Manager versioni = 2.4.6, vulnerabile sotto CVE-2021-40964. Lo script sfrutta: Validazione debole del...

CVE-2022-3992

CVE-2022-3992 Cross-Site Scripting in WonderCMS Beschreibung: Eine Cross-Site-Scripting XSS-Sicherheitslücke im Sanitization Management System v1.0 ermöglicht es potenziellen Angreifern, beliebige Dateien über einen manipulierten Namen in die Systemlogo-Felder der Systeminfo-Felder hochzuladen. D...

CVE-2026-32559

Subscriber Arbitrary File Upload in UltimateAI = 3.1.0 versions...

CVE-2026-32559

UltimateAI is a WordPress plugin affected by an arbitrary file upload vulnerability in versions ≤ 3.1.0 . A user with Subscriber privilege level can upload arbitrary files without user interaction, with a scope change that allows full compromise of confidentiality, integrity, and availability (CV...

CVE-2026-32559 WordPress UltimateAI plugin <= 3.1.0 - Arbitrary File Upload vulnerability

Subscriber Arbitrary File Upload in UltimateAI = 3.1.0 versions...

CVE-2023-44763_ConcreteCMS-Arbitrary-file-upload-Thumbnail

ConcreteCMS XSS Armazenado v.9.2.1 Autor: Sergio Descrição: O ConcreteCMS v9.2.1 é afetado por uma vulnerabilidade de Upload Arbitrário de Arquivos que permite Cross-Site Scripting XSS armazenado. Vetores de Ataque: Uma vulnerabilidade na sanitização do upload de arquivos "Thumbnail" permite...

WordPress UltimateAI plugin <= 3.1.0 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Jamaal ahmed in WordPress Plugin UltimateAI versions = 3.1.0...

CVE-2026-19852

NewSiteServer NSS developed by CyberTutor has an Arbitrary File Upload vulnerability. Unauthenticated remote attackers can upload arbitrary files, including malicious HTML files, thereby achieving effects similar to cross-site scripting...

CVE-2026-19852

NewSiteServer (NSS) developed by CyberTutor is affected by an Arbitrary File Upload vulnerability. Unauthenticated remote attackers can upload arbitrary files, including malicious HTML files, achieving effects similar to cross-site scripting (XSS) . The CVSS 3.1 base score is 6.1 (MEDIUM) , with ...

EUVD-2026-64707

NewSiteServer NSS developed by CyberTutor has an Arbitrary File Upload vulnerability. Unauthenticated remote attackers can upload arbitrary files, including malicious HTML files, thereby achieving effects similar to cross-site scripting...