128 matches found
CVE-2024-9047-Exploit
CVE-2024-9047: WordPress File Upload プラグイン用エクスプロイト 説明 WordPress 用の WordPress File Upload プラグインは、wfufiledownloader.php ファイルを介して、バージョン 4.24.11 以前の全バージョンにおいて パストラバーサル Path Traversal の脆弱性の影響を受けます。この脆弱性により、認証されていない攻撃者が意図されたディレクトリの外部にあるファイルを読み取ったり削除したりできます。悪用を成功させるには、対象の WordPress インストールが PHP 7.4 以前...
CVE-2024-9047
POC - WordPress File Upload プラグイン、バージョン = 4.24.11 以前の wfufiledownloader.php ファイル - CVE-2024-9047 概要 WordPress File Upload プラグインは、wfufiledownloader.php ファイルにおける不適切な入力検証により脆弱です。影響を受けるバージョンは = 4.24.11 です。この脆弱性により、認証されていないユーザーがサーバーのファイルシステムから任意のファイルをダウンロードでき、データの外部流出やシステム侵害につながる可能性があります。 影響を受けるデバイス...
CVE-2024-11635
WordPress File Upload このREADMEは、教育および防御目的のために公開された脆弱性を文書化したものです。本番環境や、所有していない、または明示的なテスト許可を得ていないシステムに対してテストを実行しないでください。 発見者: abrahack ステータス: 公開情報開示 報告日: 2025-01-07 CVE ID: CVE-2024-11635 スクリーンショット Exploit --- 概要 WordPress用プラグイン WordPress File Upload は、'wfuABSPATH'...
CVE-2024-11613-wp-file-upload
CVE-2024-11613-wp-file-upload Chirag Artani（https://3rag.com）によるCVE-2024-11613（WordPress File Upload）のエクスプロイト 情報はこちら - WordPress用WordPress File...
CVE-2024-9047
CVE-2024-9047 CVE-2024-9047, wfufiledownloader.php wfufiledownloader.php 파일로 접근, WordPress File Upload Solution poc, 솔루션 취약점 발생, 임의로 파일에 접근하여 조작하거나 수정할 수 있음...
CVE-2026-17542
The File Manager WordPress plugin before 6.9.1 does not perform any capability check on one of its file manager connector endpoints, allowing any authenticated user, such as a subscriber, to browse the entire WordPress installation directory and download files of certain types from it, including...
CVE-2026-17540
The File Manager WordPress plugin before 6.9.1 does not properly authorise its file management commands, allowing any authenticated user, such as a subscriber, to read and delete arbitrary files under the WordPress installation directory, which could lead to the disclosure of the site's...
CVE-2026-17044
CVE-2026-17044 affects the Iptanus File Upload WordPress plugin prior to 5.1.8. The issue is an SQL injection caused by improper sanitisation/escaping of a parameter used in a SQL statement, exploitable by unauthenticated users. Base score 8.6 (HIGH); remediation is to upgrade to 5.1.8 or later. ...
CVE-2026-66447
Unauthenticated SQL Injection in WordPress File Upload = 5.1.7 versions...
CVE-2026-66447 WordPress WordPress File Upload plugin <= 5.1.7 - SQL Injection vulnerability
Unauthenticated SQL Injection in WordPress File Upload = 5.1.7 versions...
CVE-2026-66447
CVE-2026-66447 : Unauthenticated SQL Injection in WordPress File Upload plugin
CVE-2026-57766
Unauthenticated Cross Site Request Forgery CSRF in WPIDE – File Manager & Code Editor = 3.5.6 versions...
PT-2026-47773
Mac Photo Gallery 3.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files by manipulating the albid parameter. Attackers can send requests to macdownload.php with directory traversal sequences to access sensitive files like wp-load.php outside...
EUVD-2026-20451
The Advanced Members for ACF plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the createcrop function in all versions up to, and including, 1.2.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, t...
📄 WordPress File Upload 4.24.11 Path Traversal / Remote Code Execution
A critical unauthenticated remote code execution vulnerability exists in the WordPress File Upload plugin versions 4.24.11 and earlier. The vulnerability allows attackers to execute arbitrary operating system commands through path traversal and improper input validation in the wfufiledownloader.p...
CVE-2024-39639
Broken Access Control vulnerability in Nickolas Bossinas WordPress File Upload allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordPress File Upload: from n/a through 4.24.7...
WordPress Frontend File Manager Plugin Insecure Direct Object Reference Vulnerability
WordPress Frontend File Manager Plugin is a plugin that allows users to upload, manage and share files through a frontend interface that supports secure storage and permission control. WordPress Frontend File Manager Plugin suffers from an insecure direct object reference vulnerability that stems...
EUVD-2014-1167
Malware in sbrugna...