CVE-2025-7443

The CVE-2025-7443 entry maps to the WordPress BerqWP plugin (versions up to and including 2.2.42). The vulnerability is an arbitrary file upload flaw caused by missing file-type validation in store_javascript_cache.php, which allows unauthenticated attackers to upload arbitrary files to the serve...

CVE-2025-7443 BerqWP <= 2.2.42 - Unauthenticated Arbitrary File Upload

The BerqWP – Automated All-In-One Page Speed Optimization for Core Web Vitals, Cache, CDN, Images, CSS, and JavaScript plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via the storejavascriptcache.php file in all versions up to, and including, 2.2.4...

CVE-2024-43160

Unrestricted Upload of File with Dangerous Type vulnerability in BerqWP allows Code Injection.This issue affects BerqWP: from n/a through 1.7.6...