Lucene search
+L

3 matches found

CNNVD
CNNVD
added 2026/03/05 12:0 a.m.11 views

WordPress plugin Drag and Drop Multiple File Upload - Contact Form 7 代码问题漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

8.1CVSS6.1AI score0.00553EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2025/12/18 9:34 p.m.5 views

CVE-2025-68109

ChurchCRM is an open-source church management system. In versions prior to 6.5.3, the Database Restore functionality does not validate the content or file extension of uploaded files. As a result, an attacker can upload a web shell file and subsequently upload a .htaccess file to enable direct...

9.1CVSS8.2AI score0.01402EPSS
SaveExploits3References1
NVD
NVD
added 2018/10/05 6:29 a.m.23 views

CVE-2015-9272

The videowhisper-video-presentation plugin 3.31.17 for WordPress allows remote attackers to execute arbitrary code because vp/vwupload.php considers a file safe when "html" are the last four characters, as demonstrated by a .phtml file containing PHP code...

9.8CVSS9.8AI score0.04989EPSS
SaveExploits1References2
Rows per page
Query Builder