CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

Rapid7 Vulnerability Database (full)•added 2025/07/12 12:00 a.m.•9 views

CVE-2025-6057: Unrestricted Upload of File with Dangerous Type

The WPBookit plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the handleimageupload function in all versions up to, and including, 1.0.4. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload...

8.8CVSS6.3AI score0.00767EPSS

SaveExploits0References1

Rapid7 Vulnerability Database (full)•added 2025/01/25 12:00 a.m.•5 views

CVE-2025-0357: Unrestricted Upload of File with Dangerous Type

The WPBookit plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'WPBProfilecontroller::handleimageupload' function in versions up to, and including, 1.6.9. This makes it possible for unauthenticated attackers to upload arbitrary files on t...

9.8CVSS8.7AI score0.0108EPSS

SaveExploits0References1

Rapid7 Vulnerability Database (full)•added 2024/10/31 12:00 a.m.•7 views

CVE-2024-10392: Unrestricted Upload of File with Dangerous Type

The AI Power: Complete AI Pack plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'handleimageupload' function in all versions up to, and including, 1.8.89. This makes it possible for unauthenticated attackers to upload arbitrary files on the...

9.8CVSS8.6AI score0.14984EPSS

SaveExploits0References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by