CVE-2026-18933 wp-downloadmanager: Unrestricted File Upload via Missing Extension/MIME Validation and Path Traversal

The wp-downloadmanager WordPress plugin, in version 1.68.11 also affecting the 6.9.4 release line, allows an admin-privileged user currentusercan'managedownloads' to upload arbitrary files via download-add.php with no extension or MIME-type validation of any kind - no wpcheckfiletypeandext, no...

doop cms <= 1.4.0b (csrf/upload shell) Multiple Vulnerabilities

No description provided by source. -------------------------------------------------------------------------- | Project: Doop = 1.4.0b CSRF && Upload Shell | | Author: x0r | | Email: [email protected] | || -- CSRF Change Admin Pass --...