CVE-2025-7443

The BerqWP WordPress plugin (all versions up to and including 2.2.42 ) is vulnerable to unauthenticated arbitrary file upload due to missing file type validation in the store_javascript_cache.php file. An attacker can upload arbitrary files to the server, potentially achieving remote code executi...

CVE-2025-7443 BerqWP <= 2.2.42 - Unauthenticated Arbitrary File Upload

The BerqWP – Automated All-In-One Page Speed Optimization for Core Web Vitals, Cache, CDN, Images, CSS, and JavaScript plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via the storejavascriptcache.php file in all versions up to, and including, 2.2.4...

CVE-2024-43160

Unrestricted Upload of File with Dangerous Type vulnerability in BerqWP allows Code Injection.This issue affects BerqWP: from n/a through 1.7.6...