Create Block Theme < 1.2.2 - Unauthenticated Arbitrary File Upload

The plugin does not have authorisation and CSRF checks, as well as does not validate the file to be uploaded, which could allow unauthenticated attackers to upload arbitrary files to the server PoC As unauthenticated user, open The file will be uploaded at...

WordPress Create Block Theme plugin <= 1.2.1 - Unauthenticated Arbitrary File Upload vulnerability

Unauthenticated Arbitrary File Upload vulnerability discovered in WordPress Create Block Theme plugin versions = 1.2.1. Solution Update the WordPress Create Block Theme plugin to the latest available version at least 1.2.2...

Create Block Theme < 1.2.2 - Unauthenticated Arbitrary File Upload

The plugin does not have authorisation and CSRF checks, as well as does not validate the file to be uploaded, which could allow unauthenticated attackers to upload arbitrary files to the server As unauthenticated user, open The file will be uploaded at...

CVE-2022-40721

Arbitrary file upload vulnerability in php uploader...

CVE-2022-40721

Arbitrary file upload vulnerability in php uploader...

CVE-2022-40721

Arbitrary file upload vulnerability in php uploader...

Design/Logic Flaw

Arbitrary file upload vulnerability in php uploader...

CVE-2022-40721

Arbitrary file upload vulnerability in php uploader...

CVE-2022-40721

The CVE-2022-40721 entry corresponds to an Arbitrary file upload vulnerability in CreativeDream php uploader. Multiple connected sources confirm that the issue stems from insufficient validation of uploaded files, enabling remote code execution via uploaded content. The NVD entry assigns a CVSS v...

CVE-2022-40721

Arbitrary file upload vulnerability in php uploader...

CVE-2022-3125

The Frontend File Manager Plugin WordPress plugin before 21.3 allows any authenticated users, such as subscriber, to rename a file to an arbitrary extension, like PHP, which could allow them to basically be able to upload arbitrary files on the server and achieve RCE...

CVE-2022-3125 Frontend File Manager < 21.3 - Subscriber+ Arbitrary File Upload

The Frontend File Manager Plugin WordPress plugin before 21.3 allows any authenticated users, such as subscriber, to rename a file to an arbitrary extension, like PHP, which could allow them to basically be able to upload arbitrary files on the server and achieve RCE...

CVE-2022-40721: Unrestricted Upload of File with Dangerous Type

Arbitrary file upload vulnerability in php uploader...

PT-2022-25494 · Unknown · Phpuploader

Name of the Vulnerable Software and Affected Versions: php uploader affected versions not specified Description: The issue is related to an arbitrary file upload vulnerability. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

CVE-2022-40341

mojoPortal v2.7 was discovered to contain an arbitrary file upload vulnerability which allows attackers to execute arbitrary code via a crafted PNG file...

Privilege escalation

mojoPortal v2.7 was discovered to contain an arbitrary file upload vulnerability which allows attackers to execute arbitrary code via a crafted PNG file...

CVE-2022-40341

mojoPortal v2.7 was discovered to contain an arbitrary file upload vulnerability which allows attackers to execute arbitrary code via a crafted PNG file...

CVE-2022-40341

mojoPortal v2.7 was discovered to contain an arbitrary file upload vulnerability which allows attackers to execute arbitrary code via a crafted PNG file...

CVE-2022-40341

mojoPortal v2.7 was discovered to contain an arbitrary file upload vulnerability which allows attackers to execute arbitrary code via a crafted PNG file...

CVE-2022-40341

mojoPortal v2.7 contains an arbitrary file upload vulnerability that allows execution of arbitrary code via a crafted PNG file. This CVE-2022-40341 affects mojoPortal 2.7; root cause is an unvalidated file upload in PNG handling. The provided documents do not include a patch version or remediatio...