Export limit exceeded: 395626 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (4417 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-39527 | 2 Sc Internet Vivoo, Wordpress | 2 Wpstream, Wordpress | 2026-06-23 | 5.4 Medium |
| Subscriber Arbitrary File Upload in WpStream < 4.11.2 versions. | ||||
| CVE-2026-39591 | 2 Cmsjunkie – Wordpress Business Directory Plugins, Wordpress | 2 Wp-businessdirectory, Wordpress | 2026-06-23 | 9.9 Critical |
| Subscriber Arbitrary File Upload in WP-BusinessDirectory <= 4.0.0 versions. | ||||
| CVE-2026-40772 | 2 Ahmad, Wordpress | 2 Geekybot, Wordpress | 2026-06-23 | 10 Critical |
| Unauthenticated Arbitrary File Upload in GeekyBot <= 1.2.2 versions. | ||||
| CVE-2026-6933 | 2 Premmerce, Wordpress | 2 Premmerce Dev Tools, Wordpress | 2026-06-23 | 8.8 High |
| The Premmerce Dev Tools plugin for WordPress is vulnerable to Remote Code Execution via missing authorization in versions up to and including 2.0. This is due to the 'generatePluginHandler' function lacking any authorization check before processing user-supplied POST data, combined with the 'createFromStub' function performing unsanitized string substitution of the 'premmerce_plugin_namespace' parameter directly into PHP stub files written to the wp-content/plugins/ directory. An attacker can inject a semicolon followed by arbitrary PHP code into the namespace parameter, causing the generated plugin file to contain and execute that code when accessed via HTTP. This makes it possible for authenticated attackers with Subscriber-level access and above to create arbitrary PHP files on the server and achieve remote code execution. | ||||
| CVE-2026-40750 | 2 Themagnifico52, Wordpress | 2 Kids Online Store, Wordpress | 2026-06-23 | 9.9 Critical |
| Unrestricted Upload of File with Dangerous Type vulnerability in themagnifico52 Kids Online Store allows Upload a Web Shell to a Web Server. This issue affects Kids Online Store: from n/a through 0.8.9. | ||||
| CVE-2022-2356 | 1 Mediajedi | 1 User Private Files | 2026-06-23 | 6.5 Medium |
| The Frontend File Manager & Sharing WordPress plugin before 1.1.3 does not filter file extensions when letting users upload files on the server, which may lead to malicious code being uploaded. | ||||
| CVE-2026-6555 | 2 Prosolution, Wordpress | 2 Prosolution Wp Client, Wordpress | 2026-06-23 | 9.8 Critical |
| The ProSolution WP Client plugin for WordPress is vulnerable to Arbitrary File Upload in versions up to, and including, 2.0.0. This is due to an array validation mismatch where only the first file in the upload array undergoes extension and MIME type validation, while all files are processed and uploaded to a web-accessible directory. This makes it possible for unauthenticated attackers to upload malicious PHP files and achieve remote code execution by sending a valid first file followed by a malicious file. | ||||
| CVE-2024-52488 | 2 Wordpress, Zidithemes | 2 Wordpress, Grip | 2026-06-20 | 9.9 Critical |
| Subscriber Arbitrary File Upload in Grip <= 1.0.9 versions. | ||||
| CVE-2025-60218 | 2 Wordpress, Wplocker | 2 Wordpress, Pt Luxa Addons | 2026-06-20 | 9.9 Critical |
| Subscriber Arbitrary File Upload in PT Luxa Addons <= 1.2.2 versions. | ||||
| CVE-2025-69129 | 2 Extendons, Wordpress | 3 Wordpress & Woocommerce Scraper Plugin, Wordpress & Woocommerce Scraper Plugin, Import Data From Any Site, Wordpress | 2026-06-20 | 10 Critical |
| Unauthenticated Arbitrary File Upload in WordPress & WooCommerce Scraper Plugin, Import Data from Any Site <= 1.0.7 versions. | ||||
| CVE-2026-22327 | 2 Wordpress, Zozothemes | 2 Wordpress, Restaurt | 2026-06-20 | 9.9 Critical |
| Subscriber Arbitrary File Upload in Restaurt <= 1.0.4 versions. | ||||
| CVE-2026-27041 | 2 Studio Keren Aga Ltd., Wordpress | 2 Unlimited Elements For Elementor (premium), Wordpress | 2026-06-20 | 9.9 Critical |
| Contributor Arbitrary File Upload in Unlimited Elements for Elementor (Premium) <= 2.0.6 versions. | ||||
| CVE-2026-39589 | 2 A Wp Life, Wordpress | 2 Webenvo, Wordpress | 2026-06-20 | 9.9 Critical |
| Subscriber Arbitrary File Upload in Webenvo <= 0.0.6 versions. | ||||
| CVE-2026-40746 | 2 Themagnifico52, Wordpress | 2 Restaurant Zone, Wordpress | 2026-06-20 | 9.9 Critical |
| Subscriber Arbitrary File Upload in Restaurant Zone <= 0.7.8 versions. | ||||
| CVE-2026-40747 | 2 Themagnifico52, Wordpress | 2 Ecommerce Zone, Wordpress | 2026-06-20 | 9.9 Critical |
| Subscriber Arbitrary File Upload in Ecommerce Zone <= 0.9.7 versions. | ||||
| CVE-2026-40748 | 2 Themagnifico52, Wordpress | 2 Kids Gift Shop, Wordpress | 2026-06-20 | 9.9 Critical |
| Subscriber Arbitrary File Upload in Kids Gift Shop <= 0.5.4 versions. | ||||
| CVE-2026-40749 | 2 Themagnifico52, Wordpress | 2 Charity Zone, Wordpress | 2026-06-20 | 9.9 Critical |
| Subscriber Arbitrary File Upload in Charity Zone <= 1.1.1 versions. | ||||
| CVE-2026-52705 | 2 Bdthemes, Wordpress | 2 Sigmaforms Pro – Ai Generated Forms, Wordpress | 2026-06-20 | 9 Critical |
| Unauthenticated Arbitrary File Upload in SigmaForms Pro – AI Generated Forms <= 1.4.5 versions. | ||||
| CVE-2026-9860 | 2 Vanyukov, Wordpress | 2 Offload, Ai & Optimize With Cloudflare Images, Wordpress | 2026-06-20 | 8.8 High |
| The Offload, AI & Optimize with Cloudflare Images plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.10.2 via the 'account-id' parameter parameter. This is due to insufficient privilege enforcement on the cf_images_do_setup AJAX handler, which requires only the upload_files capability (Author+) rather than manage_options before writing to wp-config.php, combined with the absence of single-quote escaping — sanitize_text_field() does not strip single quotes, and filter_input(INPUT_POST) bypasses wp_magic_quotes() slashing — allowing a single quote in the account-id or api-key parameter to break out of the single-quoted PHP string literal in the write_config() define() statement. This makes it possible for authenticated attackers, with author-level access and above, to execute code on the server. This is possible because the 'cf-images-nonce' nonce required by the AJAX handler is exposed to all Author-level and above users on wp-admin/upload.php via the CFImages JavaScript object, meaning any upload-capable user can satisfy the nonce check and reach the vulnerable wp-config.php write path. | ||||
| CVE-2026-11419 | 1 Altium | 2 Enterprise Server, On-prem Enterprise Server | 2026-06-16 | 8.8 High |
| A path traversal vulnerability exists in the Altium Enterprise Server Vault Service UploadController due to improper validation of a user-controlled path component in image upload requests. An authenticated user can supply a crafted absolute path so that the configured storage root is discarded, allowing arbitrary files to be written to any location on the server filesystem writable by the service account. Because content-controlled files can be written to web-accessible directories, or used to overwrite application binaries or configuration files, this can be escalated to remote code execution, service takeover, or denial of service. Altium 365 cloud deployments are not affected, as the affected endpoint is not reachable and the cloud storage architecture mitigates the file-write primitive. | ||||