CVE-2026-88745: Improper Neutralization of Input During Web Page Generation

EMLOG-Pro 2.6.29 contains a XSS vulnerability that enables attackers to upload a malicious shell...

CVE-2026-36467

Unrestricted Upload of File with Dangerous Type in core/modules/media.php in CuteNews v.2.1.2 allows remote authenticated users with access to the Media Manager panel to execute arbitrary code in the context of the web application, leading to remote server access by triggering a reverse shell...

PT-2026-96126

Name of the Vulnerable Software and Affected Versions CuteNews version 2.1.2 Description Server-Side Request Forgery SSRF exists in the Media Manager's "Upload by URL" functionality. The issue is located in the upload from inet function within the core/modules/media.php file. Recommendations As a...

CVE-2026-36469

CuteNews v.2.1.2 is vulnerable to Server-Side Request Forgery (SSRF) within the core/modules/media.php file. The flaw exists in the upload_from_inet function, which powers the Media Manager's "Upload by URL" functionality. This vulnerability allows an attacker to trigger requests from the server ...

CVE-2026-82187: Unrestricted Upload of File with Dangerous Type

The Web to Print Online Designer WordPress plugin before 2.15.0 does not validate the type or extension of uploaded files, and hands the token protecting those uploads to any visitor who asks for it, allowing unauthenticated attackers to upload arbitrary files, including PHP ones, and run code on...

CVE-2024-11680

ProjectSend CVE-2024-11680 エクスプロイト これは、ProjectSend における CVE-2024-11680 の概念実証エクスプロイトです。この脆弱性は認証不要の設定変更とウェブシェルのアップロードを可能にします。 説明 このエクスプロイトは ProjectSend の複数の脆弱性を利用します: CSRFトークンのバイパスによる設定変更 安全でないクライアント登録設定 無制限のファイルアップロードによるリモートコード実行 必要条件 Python 3.x 必要な Python パッケージ: root@kitploit: pip install request...

CVE-2026-94104

NivoCart through 2.4.0 contains an arbitrary file upload vulnerability in the File Manager multi endpoint that fails to validate file extensions for new filenames or when chunks parameter is 2 or higher. Attackers with view-only back-office access can upload PHP files to the web-accessible...

CVE-2026-94104 NivoCart through 2.4.0 Arbitrary File Upload RCE via filemanager

NivoCart through 2.4.0 contains an arbitrary file upload vulnerability in the File Manager multi endpoint that fails to validate file extensions for new filenames or when chunks parameter is 2 or higher. Attackers with view-only back-office access can upload PHP files to the web-accessible...

CVE-2026-94104 NivoCart through 2.4.0 Arbitrary File Upload RCE via filemanager

NivoCart through 2.4.0 contains an arbitrary file upload vulnerability in the File Manager multi endpoint that fails to validate file extensions for new filenames or when chunks parameter is 2 or higher. Attackers with view-only back-office access can upload PHP files to the web-accessible...

EUVD-2026-83724

NivoCart through 2.4.0 contains an arbitrary file upload vulnerability in the File Manager multi endpoint that fails to validate file extensions for new filenames or when chunks parameter is 2 or higher. Attackers with view-only back-office access can upload PHP files to the web-accessible...

CVE-2026-94104

NivoCart through 2.4.0 contains an arbitrary file upload vulnerability in the File Manager multi() endpoint (filemanager.php). The root cause is a failure to validate file extensions for new filenames or when the chunks parameter is 2 or higher. An attacker with view-only back-office access can u...

CVE-2026-94104 NivoCart through 2.4.0 Arbitrary File Upload RCE via filemanager

NivoCart through 2.4.0 contains an arbitrary file upload vulnerability in the File Manager multi endpoint that fails to validate file extensions for new filenames or when chunks parameter is 2 or higher. Attackers with view-only back-office access can upload PHP files to the web-accessible...

CVE-2026-84223

The Kirki WordPress plugin before 6.3.1 does not sanitize uploaded SVG files while making them uploadable site-wide, allowing users with author-level access and above to upload a file containing JavaScript which is then served from the site's own origin and runs in the session of anyone who opens...

CVE-2026-84223 Kirki 6.0.0 - 6.3.0 - Author+ Stored XSS via Unsanitized SVG Upload

The Kirki WordPress plugin before 6.3.1 does not sanitize uploaded SVG files while making them uploadable site-wide, allowing users with author-level access and above to upload a file containing JavaScript which is then served from the site's own origin and runs in the session of anyone who opens...

EUVD-2026-83668

The Kirki WordPress plugin before 6.3.1 does not sanitize uploaded SVG files while making them uploadable site-wide, allowing users with author-level access and above to upload a file containing JavaScript which is then served from the site's own origin and runs in the session of anyone who opens...

CVE-2026-84223 Kirki 6.0.0 - 6.3.0 - Author+ Stored XSS via Unsanitized SVG Upload

The Kirki WordPress plugin before 6.3.1 does not sanitize uploaded SVG files while making them uploadable site-wide, allowing users with author-level access and above to upload a file containing JavaScript which is then served from the site's own origin and runs in the session of anyone who opens...

CVE-2026-84223

The Kirki WordPress plugin (versions 6.0.0 - 6.3.0 ) is vulnerable to a Stored XSS flaw because it fails to sanitize uploaded SVG files while making them uploadable site-wide. This allows users with author-level access and above to upload a file containing malicious JavaScript . Because the file ...

CVE-2026-81650 NextGEN Gallery < 4.5.0 - Authenticated Arbitrary File Upload via ZIP Import

The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not correctly validate the extensions of files extracted from an uploaded archive, due to a variable being reused as a loop counter so that the check always passes, allowing users granted its gallery-management capability...

CVE-2026-81650 NextGEN Gallery < 4.5.0 - Authenticated Arbitrary File Upload via ZIP Import

The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not correctly validate the extensions of files extracted from an uploaded archive, due to a variable being reused as a loop counter so that the check always passes, allowing users granted its gallery-management capability...

PT-2026-95955

Name of the Vulnerable Software and Affected Versions NivoCart versions prior to 2.4.1 Description An arbitrary file upload flaw exists in the File Manager multi endpoint. The system fails to validate file extensions for new filenames or when the chunks parameter is set to 2 or higher. This allow...