CVE-2026-39755

The WordPress WP Duplicate plugin (versions

CVE-2026-32579 WordPress Kognetiks Chatbot for WordPress plugin <= 2.4.9 - Arbitrary File Upload vulnerability

Unauthenticated Arbitrary File Upload in Kognetiks Chatbot for WordPress = 2.4.9 versions...

EUVD-2026-93240

Unauthenticated Arbitrary File Upload in Kognetiks Chatbot for WordPress = 2.4.9 versions...

CVE-2026-32579

The Kognetiks Chatbot for WordPress plugin (versions

CVE-2026-32579 WordPress Kognetiks Chatbot for WordPress plugin <= 2.4.9 - Arbitrary File Upload vulnerability

Unauthenticated Arbitrary File Upload in Kognetiks Chatbot for WordPress = 2.4.9 versions...

CVE-2026-94278 File Media Renamer <= 1.3 - Author+ Arbitrary File Rename via save-attachment-compat

The File Media Renamer WordPress plugin through 1.3 does not verify that the requesting user is authorised to modify a given media attachment, allowing any user with file-upload privileges to rename attachments belonging to other users, including administrators, and to corrupt unrelated stored si...

CVE-2026-94278

The File Media Renamer WordPress plugin (versions

cve-2020-24572

CVE-2020-24572 Se descubrió un problema en includes/webconsole.php en RaspAP 2.5. Con acceso autenticado, un atacante puede utilizar una consola web mal configurada y prácticamente sin restricciones para atacar el sistema operativo subyacente que ejecuta este software, y ejecutar comandos en el...

CVE-2026-105762

Dify is an open-source LLM app development platform. Prior to 1.13.0, the /console/api/remote-files/upload endpoint in api/controllers/web/remotefiles.py accepted an attacker-controlled URL without authentication and caused the Dify server to retrieve it. A remote attacker could use the endpoint ...

PT-2026-106405

Name of the Vulnerable Software and Affected Versions Kognetiks Chatbot for WordPress versions prior to 2.5.0 Description An unauthenticated arbitrary file upload issue exists in the Kognetiks Chatbot for WordPress plugin. This allows an attacker to upload files to the server without requiring...

PT-2026-106431

Subscriber Arbitrary File Upload in Taskbot = 6.6 versions...

PT-2026-106442

Name of the Vulnerable Software and Affected Versions Doctreat versions prior to 1.7.1 Description An unauthenticated arbitrary file upload issue exists in the Doctreat WordPress theme. This allows an attacker to upload files to the server without requiring authentication. Recommendations Update ...

PT-2026-106433

Employer / Sales Representative Arbitrary File Upload in Workreap Core = 3.4.5 versions...

PT-2026-106755

SimpleChat is a secure AI conversation application with personal and group workspaces for document-grounded interactions. Prior to 0.261.029, POST /api/group documents/upload stores an attacker-controlled group document filename that group workspaces.html later interpolates into inline Share even...

CVE-2026-39759: Unrestricted Upload of File with Dangerous Type

Employer / Sales Representative Arbitrary File Upload in Workreap Core = 3.4.5 versions...

CVE-2026-32579: Unrestricted Upload of File with Dangerous Type

Unauthenticated Arbitrary File Upload in Kognetiks Chatbot for WordPress = 2.4.9 versions...

CVE-2026-39755: Unrestricted Upload of File with Dangerous Type

Subscriber Arbitrary File Upload in WP Duplicate = 1.1.11 versions...

CVE-2026-39757: Unrestricted Upload of File with Dangerous Type

Subscriber Arbitrary File Upload in Taskbot = 6.6 versions...

CVE-2026-39770: Unrestricted Upload of File with Dangerous Type

Unauthenticated Arbitrary File Upload in Doctreat = 1.7.0 versions...

CVE-2026-101158: Improper Neutralization of Input During Web Page Generation

A missing input validation vulnerability in the Fileserver upload API allows an authenticated attacker with file upload privileges to execute stored cross-site scripting XSS. Successful exploitation could enable the attacker to hijack another CloudVision user's web session, potentially granting...