85885 matches found
EUVD-2026-93266
Subscriber Arbitrary File Upload in Taskbot = 6.6 versions...
CVE-2026-39757
The Taskbot plugin for WordPress (versions
CVE-2026-39757 WordPress Taskbot plugin <= 6.6 - Arbitrary File Upload vulnerability
Subscriber Arbitrary File Upload in Taskbot = 6.6 versions...
CVE-2026-39757 WordPress Taskbot plugin <= 6.6 - Arbitrary File Upload vulnerability
Subscriber Arbitrary File Upload in Taskbot = 6.6 versions...
CVE-2026-39755 WordPress WP Duplicate plugin <= 1.1.11 - Arbitrary File Upload vulnerability
Subscriber Arbitrary File Upload in WP Duplicate = 1.1.11 versions...
CVE-2026-39755 WordPress WP Duplicate plugin <= 1.1.11 - Arbitrary File Upload vulnerability
Subscriber Arbitrary File Upload in WP Duplicate = 1.1.11 versions...
EUVD-2026-93264
Subscriber Arbitrary File Upload in WP Duplicate = 1.1.11 versions...
CVE-2026-39755
The WordPress WP Duplicate plugin (versions
CVE-2026-32579 WordPress Kognetiks Chatbot for WordPress plugin <= 2.4.9 - Arbitrary File Upload vulnerability
Unauthenticated Arbitrary File Upload in Kognetiks Chatbot for WordPress = 2.4.9 versions...
EUVD-2026-93240
Unauthenticated Arbitrary File Upload in Kognetiks Chatbot for WordPress = 2.4.9 versions...
CVE-2026-32579 WordPress Kognetiks Chatbot for WordPress plugin <= 2.4.9 - Arbitrary File Upload vulnerability
Unauthenticated Arbitrary File Upload in Kognetiks Chatbot for WordPress = 2.4.9 versions...
CVE-2026-32579
The Kognetiks Chatbot for WordPress plugin (versions
CVE-2026-94278 File Media Renamer <= 1.3 - Author+ Arbitrary File Rename via save-attachment-compat
The File Media Renamer WordPress plugin through 1.3 does not verify that the requesting user is authorised to modify a given media attachment, allowing any user with file-upload privileges to rename attachments belonging to other users, including administrators, and to corrupt unrelated stored si...
CVE-2026-94278
The File Media Renamer WordPress plugin (versions
cve-2020-24572
CVE-2020-24572 Se descubrió un problema en includes/webconsole.php en RaspAP 2.5. Con acceso autenticado, un atacante puede utilizar una consola web mal configurada y prácticamente sin restricciones para atacar el sistema operativo subyacente que ejecuta este software, y ejecutar comandos en el...
CVE-2026-105762
Dify is an open-source LLM app development platform. Prior to 1.13.0, the /console/api/remote-files/upload endpoint in api/controllers/web/remotefiles.py accepted an attacker-controlled URL without authentication and caused the Dify server to retrieve it. A remote attacker could use the endpoint ...
PT-2026-106405
Name of the Vulnerable Software and Affected Versions Kognetiks Chatbot for WordPress versions prior to 2.5.0 Description An unauthenticated arbitrary file upload issue exists in the Kognetiks Chatbot for WordPress plugin. This allows an attacker to upload files to the server without requiring...
PT-2026-106442
Name of the Vulnerable Software and Affected Versions Doctreat versions prior to 1.7.1 Description An unauthenticated arbitrary file upload issue exists in the Doctreat WordPress theme. This allows an attacker to upload files to the server without requiring authentication. Recommendations Update ...
CVE-2026-105762: Server-Side Request Forgery (SSRF)
Dify is an open-source LLM app development platform. Prior to 1.13.0, the /console/api/remote-files/upload endpoint in api/controllers/web/remotefiles.py accepted an attacker-controlled URL without authentication and caused the Dify server to retrieve it. A remote attacker could use the endpoint ...