CWE-434: Unrestricted File Upload
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.
Also known as Unrestricted Upload of File with Dangerous Type.
A kind of CWE-669 Incorrect Resource Transfer Between Spheres.
From the CWE List. © The MITRE Corporation.
Newest
- sas studio*Unrestricted file upload in /SASStudio/SASStudio/sasexec/{sessionID}/{InternalPath} in SAS...8.8 High
- sage 1000, frp 1000 +1 moreAn Unrestricted File Upload vulnerability exists in Sage 1000 v7.0.0, which allows authorized...8.1 High
- thecosy icecmsicecms <=3.4.7 has a File Upload vulnerability in FileUtils.java,uploadFile.9.8 Critical
- operatelyUnrestricted File Upload in the Discussions tab in Operately v.0.1.0 allows a privileged user to...8.0 High
- adirectoryWordPress aDirectory plugin <= 1.3 - Arbitrary File Upload vulnerability10.0 Critical
- devsoft baltic surveyjsWordPress SurveyJS plugin <= 1.9.136 - Arbitrary File Upload vulnerability9.9 Critical
- ajar productions in5 embedWordPress Ajar in5 Embed plugin <= 3.1.3 - Arbitrary File Upload vulnerability10.0 Critical
- azexo marketing automation by azexoWordPress Marketing Automation by AZEXO plugin <= 1.27.80 - Arbitrary File Upload vulnerability9.9 Critical
- chetan khandla woocommerce product designWordPress Woocommerce Product Design plugin <= 1.0.0 - Arbitrary File Upload vulnerability10.0 Critical
- lindeni mahlalela multi purpose mail formWordPress Multi Purpose Mail Form plugin <= 1.0.2 - Arbitrary File Upload vulnerability10.0 Critical
- masterhomepage automatic translationWordPress Automatic Translation plugin <= 1.0.4 - Arbitrary File Upload vulnerability10.0 Critical
- amin omer sudan payment gateway for woocommerce, wc sudan payment gateway +1 moreWordPress Sudan Payment Gateway for WooCommerce plugin <= 1.2.2 - Arbitrary File Upload vulnerability10.0 Critical
- nunomorgadinho plugin propagatorWordPress Plugin Propagator plugin <= 0.1 - Arbitrary File Upload vulnerability10.0 Critical
- webandprint ar, ar for wordpress +1 moreWordPress AR For WordPress plugin <= 6.6 - Arbitrary File Upload vulnerability10.0 Critical
- fast5 prison management systemFile Upload vulnerability in Prison Management System v.1.0 allows a remote attacker to execute...8.8 High
- nurhodelta17 attendance and payroll systemSourceCodester Attendance and Payroll System update.php upload unrestricted upload5.3 Medium
- code-projects online hotel reservation systemSourceCodester Online Hotel Reservation System update.php upload unrestricted upload5.3 Medium
- code-projects online hotel reservation systemSourceCodester Online Hotel Reservation System controller.php upload unrestricted upload5.3 Medium
- cleo harmony, lexicom, vltrader +1 more +3 moreIn Cleo Harmony before 5.8.0.20, VLTrader before 5.8.0.20, and LexiCom before 5.8.0.20, there is...9.8 Critical
- jurre de klijn wux blog editorWux Blog Editor <= 3.0.0 - Unauthenticated Arbitrary File Upload9.8 Critical
- radix iot mango api, radixiot mango, radix iot mango os +1 more +3 moreAn arbitrary file upload vulnerability in MangoOS before 5.1.4 and Mango API before 4.5.5 allows...8.8 High
- oretnom23 purchase order management system, purchase order management system project order management system +1 moreAn issue in SourceCodester Purchase Order Management System v1.0 allows a remote attacker to...7.2 High
- gl-inet a1300 firmware, ar300m16 firmware, ar300m firmware +23 more +25 moreAn issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800,...8.8 High
- zzcmsZZCMS functions.php Ebak_SetGotoPak unrestricted upload5.3 Medium
- renata bracichowicz 3d work in progressWordPress 3D Work In Progress plugin <= 1.0.3 - Arbitrary File Upload vulnerability9.9 Critical
- james eggers portfolleoWordPress Portfolleo plugin <= 1.2 - Arbitrary File Upload vulnerability9.9 Critical
- ecomerciar woocommerce custom profile pictureWordPress Woocommerce Custom Profile Picture plugin <= 1.0 - Arbitrary File Upload vulnerability9.9 Critical
- admin verbalize, verbalize wp +1 moreWordPress Verbalize WP plugin <= 1.0 - Arbitrary File Upload vulnerability10.0 Critical
- alexander de ridder ink officialWordPress INK Official plugin <= 4.1.2 - Arbitrary File Upload vulnerability9.9 Critical
- dogu pekgoz ai image generator for your content & featured images – ai postpix, postpix ai postpix +1 moreWordPress AI Postpix plugin <= 1.1.8 - Arbitrary File Upload vulnerability9.9 Critical
- michael bourne custom icons for elementorWordPress Custom Icons for Elementor plugin <= 0.3.3 - Arbitrary File Upload vulnerability6.6 Medium
- zzcmsZZCMS ChangeTable.php unrestricted upload5.3 Medium
- ladybirdweb faveo helpdeskAn arbitrary file upload vulnerability in the Ticket Generation function of Ladybird Web Solution...8.2 High
- wellchoose administrative management systemWellchoose Administrative Management System - Arbitrary File Upload8.8 High
- sovratec case management, sovratecdev sovratec case management +1 moreWordPress Sovratec Case Management plugin <= 1.0.0 - Arbitrary File Upload vulnerability10.0 Critical
- vasileios kerasiotis affiliatorWordPress Affiliator plugin <= 2.1.3 - Arbitrary File Upload vulnerability10.0 Critical
- asep bagja priandana woostagram connectWordPress Woostagram Connect plugin <= 1.0.2 - Arbitrary File Upload vulnerability10.0 Critical
- vivek tamrakar wp rest api fnsWordPress WP REST API FNS plugin <= 1.0.0 - Arbitrary File Upload vulnerability10.0 Critical
- brx8r nice backgroundsWordPress Nice Backgrounds plugin <= 1.0 - Arbitrary File Upload vulnerability10.0 Critical
- myriad solutionz property lot management systemWordPress Property Lot Management System plugin <= 4.2.38 - Arbitrary File Upload vulnerability9.9 Critical
- redhopit wp dropbox dropinsWordPress WP Dropbox Dropins plugin <= 1.0 - Arbitrary File Upload vulnerability10.0 Critical
- jack zhu photokitWordPress photokit plugin <= 1.0 - Arbitrary File Upload vulnerability10.0 Critical
- paxman product website showcaseWordPress Product Website Showcase plugin <= 1.0 - Arbitrary File Upload vulnerability10.0 Critical
- phpgurukul boat booking systemPHPGurukul Boat Booking System Update Boat Image Page change-image.php unrestricted upload5.3 Medium
- radarwfh45678 Radar upload unrestricted upload6.9 Medium
- boxystudio cooked, gora tech llc cooked pro +1 moreWordPress Cooked Pro plugin < 1.8.0 - Unauthenticated Arbitrary File Upload vulnerability10.0 Critical
- jiangqie free mini program, zhuige jiangqie free mini program +1 moreWordPress JiangQie Free Mini Program plugin <= 2.5.2 - Arbitrary File Upload vulnerability10.0 Critical
- elvaco m-bus metering gateway cme3100, cme3100 firmware +1 moreUnrestricted Upload of File with Dangerous Type in Elvaco M-Bus Metering Gateway CMe31008.8 High
- fliperrr creates 3d flipbook, pdf flipbook, fliperr team creates 3d flipbook pdf flipbook +1 moreWordPress Creates 3D Flipbook, PDF Flipbook plugin <= 1.2 - Arbitrary File Upload vulnerability9.9 Critical
- jclay06 feed comments numberWordPress Feed Comments Number plugin <= 0.2.1 - Arbitrary File Upload vulnerability10.0 Critical
- Show moreLoading…