CVE-2025-39401

CVE-2025-39401 WordPress WPAMS Plugin WordPress WPAMS Plugin CVE: CVE-2025-39401 Base Score: 10.0 CRITICAL Unrestricted Upload of File with Dangerous Type vulnerability in mojoomla WPAMS lets attackers upload a web shell to the server, leading to full compromise. This affects WPAMS versions: from...

CVE-2026-14894

CVE-2026-14894 — Super Forms Unauthenticated File Upload RCE Nonce Leak → datauristring Upload → Code Execution Overview CVE-2026-14894 is a critical-severity CVSS 9.8 unauthenticated arbitrary file upload vulnerability in the Super Forms – Drag & Drop Form Builder WordPress plugin by WebRehab...

CVE-2026-48907

CVE-2026-48907 - Joomla! JCE RCE sin autenticación Extensión Joomla! JCE Esta herramienta es solo para fines educativos y de pruebas autorizadas. Úsela solo en sistemas que posea o tenga permiso explícito para probar El autor no se hace responsable de ningún uso indebido...

CVE-2026-39770

The Doctreat WordPress theme, version 1.7.0 and below , is vulnerable to an unauthenticated arbitrary file upload (CWE-434). This vulnerability allows an attacker to upload files with dangerous types to the server. The impact is rated as CRITICAL (CVSS 3.1 score of 10.0), potentially leading to h...

EUVD-2026-93277

Unauthenticated Arbitrary File Upload in Doctreat = 1.7.0 versions...

CVE-2026-39770 WordPress Doctreat theme <= 1.7.0 - Arbitrary File Upload vulnerability

Unauthenticated Arbitrary File Upload in Doctreat = 1.7.0 versions...

CVE-2026-39770 WordPress Doctreat theme <= 1.7.0 - Arbitrary File Upload vulnerability

Unauthenticated Arbitrary File Upload in Doctreat = 1.7.0 versions...

CVE-2026-39759

The Workreap Core WordPress plugin versions

CVE-2026-39759 WordPress Workreap Core plugin <= 3.4.5 - Arbitrary File Upload vulnerability

Employer / Sales Representative Arbitrary File Upload in Workreap Core = 3.4.5 versions...

CVE-2026-39759 WordPress Workreap Core plugin <= 3.4.5 - Arbitrary File Upload vulnerability

Employer / Sales Representative Arbitrary File Upload in Workreap Core = 3.4.5 versions...

EUVD-2026-93268

Employer / Sales Representative Arbitrary File Upload in Workreap Core = 3.4.5 versions...

EUVD-2026-93266

Subscriber Arbitrary File Upload in Taskbot = 6.6 versions...

CVE-2026-39757

The Taskbot plugin for WordPress (versions

CVE-2026-39757 WordPress Taskbot plugin <= 6.6 - Arbitrary File Upload vulnerability

Subscriber Arbitrary File Upload in Taskbot = 6.6 versions...

CVE-2026-39757 WordPress Taskbot plugin <= 6.6 - Arbitrary File Upload vulnerability

Subscriber Arbitrary File Upload in Taskbot = 6.6 versions...

EUVD-2026-93264

Subscriber Arbitrary File Upload in WP Duplicate = 1.1.11 versions...

CVE-2026-39755 WordPress WP Duplicate plugin <= 1.1.11 - Arbitrary File Upload vulnerability

Subscriber Arbitrary File Upload in WP Duplicate = 1.1.11 versions...

CVE-2026-39755 WordPress WP Duplicate plugin <= 1.1.11 - Arbitrary File Upload vulnerability

Subscriber Arbitrary File Upload in WP Duplicate = 1.1.11 versions...

CVE-2026-39755

The WordPress WP Duplicate plugin (versions

CVE-2026-32579 WordPress Kognetiks Chatbot for WordPress plugin <= 2.4.9 - Arbitrary File Upload vulnerability

Unauthenticated Arbitrary File Upload in Kognetiks Chatbot for WordPress = 2.4.9 versions...