CWE-434: Unrestricted File Upload
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.
Also known as Unrestricted Upload of File with Dangerous Type.
A kind of CWE-669 Incorrect Resource Transfer Between Spheres.
From the CWE List. © The MITRE Corporation.
Newest
- team devexhub devexhub galleryWordPress Devexhub Gallery plugin <= 2.0.1 - Arbitrary File Upload vulnerability10.0 Critical
- dothattask do that taskWordPress Do That Task plugin <= 1.5.5 - Arbitrary File Upload vulnerability10.0 Critical
- arttia creative datasets manager by arttia creative, datasets manager +1 moreWordPress Datasets Manager by Arttia Creative plugin <= 1.5 - Arbitrary File Upload vulnerability10.0 Critical
- cmsminds boat rental plugin for wordpressWordPress Boat Rental Plugin for WordPress plugin <= 1.0.1 - Arbitrary File Upload vulnerability10.0 Critical
- bdthemes instant image generatorWordPress Instant Image Generator (One Click Image Uploads from Pixabay, Pexels and OpenAI) plugin <= 1.5.2 - Arbitrary File Upload vulnerability10.0 Critical
- faizalbahasan kineticpay for woocommerceWordPress kineticPay for WooCommerce plugin <= 2.0.8 - Arbitrary File Upload vulnerability10.0 Critical
- softpulse infotech picsmizeWordPress Picsmize plugin <= 1.0.0 - Arbitrary File Upload vulnerability10.0 Critical
- lollms lollms-webui, parisneo parisneo/lollms-webui +1 moreXSS and Open Redirect via SVG File Upload in parisneo/lollms-webui7.3 High
- sage ai ai: chatbots, openai gpt-4 bulk articles, dalle-3 image generation, sageai sage ai, wpmonks sage ai: chatbots, openai gpt-4 bulk articles, dalle-3 image generation +2 moreWordPress Sage AI: Chatbots, OpenAI GPT-4 Bulk Articles, Dalle-3 Image Generation plugin <= 2.4.9 - Arbitrary File Upload vulnerability9.9 Critical
- mayurik best employee management systemSourceCodester Best Employee Management System profile.php unrestricted upload5.1 Medium
- osamataher java-springboot-codebasecommon-user-management Unrestricted File Upload Leading to Remote Code Execution (RCE)8.7 High
- eyoucmsEyouCMS Website Logo unrestricted upload5.1 Medium
- unknown woocommerce upload files, woocommerce upload files +1 moreWooCommerce Upload Files <= 84.3 - Unauthenticated Arbitrary File Upload9.8 Critical
- dedecmsDedeCMS friendlink_add.php unrestricted upload5.1 Medium
- 51mis lingdang crm上海灵当信息科技有限公司 Lingdang CRM index.php unrestricted upload5.3 Medium
- grand vice info webopacGrand Vice info Webopac - Arbitrary File Upload9.8 Critical
- grand vice info webopacGrand Vice info Webopac - Arbitrary File Upload8.8 High
- joshua wolfe the novel design store directoryWordPress The Novel Design Store Directory plugin <= 4.3.0 - Arbitrary File Upload vulnerability10.0 Critical
- ujw0l image classifyWordPress Image Classify plugin <= 1.0.0 - Arbitrary File Upload vulnerability10.0 Critical
- hb websol audio gallery, team hb websol hb audio gallery +1 moreWordPress HB AUDIO GALLERY plugin <= 3.0 - Arbitrary File Upload vulnerability10.0 Critical
- made i.t. formsWordPress Forms plugin <= 2.8.0 - Arbitrary File Upload vulnerability10.0 Critical
- dang ngoc binh audio recordWordPress Audio Record plugin <= 1.0 - Arbitrary File Upload vulnerability10.0 Critical
- ateeq rafeeq repairbuddy, webfulcreations computer repair shop +1 moreWordPress RepairBuddy plugin <= 3.8115 - Arbitrary File Upload vulnerability10.0 Critical
- oretnom23 simple music cloud community systemSourceCodester Simple Music Cloud Community System ajax.php unrestricted upload5.3 Medium
- vanquish wordpress user extra fieldsWordPress User Extra Fields <= 16.5 - Unauthenticated Arbitrary File Upload9.8 Critical
- e-plugins wp membershipWP Membership <= 1.6.2 - Unauthenticated Arbitrary File Upload9.8 Critical
- support ticket system project ticket system, vanquish woocommerce support ticket system +1 moreWooCommerce Support Ticket System <= 17.7 - Unauthenticated Arbitrary File Upload9.8 Critical
- codeastro real estate management systemCodeAstro Real Estate Management System About Us Page aboutedit.php unrestricted upload5.1 Medium
- codeastro real estate management systemCodeAstro Real Estate Management System About Us Page aboutadd.php unrestricted upload5.1 Medium
- codezips online institute management systemCodezips Online Institute Management System edit_user.php unrestricted upload5.3 Medium
- codezips online institute management systemCodezips Online Institute Management System manage_website.php unrestricted upload5.3 Medium
- alexstack laravel cmsFile Upload vulnerability in Laravel CMS v.1.4.7 and before allows a remote attacker to execute...7.2 High
- google quick share, nearby +1 moreAuth Bypass in Quickshare5.9 Medium
- eyecix jobsearch wp job boardWP JobSearch <= 2.6.7 - Unauthenticated Arbitrary File Upload10.0 Critical
- eyecix jobsearch wp job boardWP JobSearch <= 2.6.7 - Authenticated (Subscriber+) Arbitrary File Upload9.9 Critical
- themelooks mfolio, mfolio lite +1 moremFolio Lite <= 1.2.1 - Missing Authorization to Authenticated (Author+) File Upload via EXE and SVG Files9.9 Critical
- codezips free exam hall seating management systemCodezips Free Exam Hall Seating Management System save_user.php unrestricted upload5.3 Medium
- codezips online institute management systemCodezips Online Institute Management System profile.php unrestricted upload5.3 Medium
- codezips online institute management systemCodezips Online Institute Management System save_user.php unrestricted upload5.3 Medium
- rainbow-link all post contact formWordPress All Post Contact Form plugin <= 1.8.2 - Arbitrary File Upload vulnerability10.0 Critical
- helloprintWordPress Helloprint plugin <= 2.0.4 - Arbitrary File Upload vulnerability10.0 Critical
- lindeni multi purpose mail formWordPress Multi Purpose Mail Form plugin <= 1.0.2 - Arbitrary File Upload vulnerability10.0 Critical
- stacks mobile app builder, stacksmarket stacks mobile app builder +1 moreWordPress Stacks Mobile App Builder plugin <= 5.2.3 - Arbitrary File Upload vulnerability10.0 Critical
- rudra innnovative software training – courses, rudra innovative software training courses, rudrainnovative training - courses +2 moreWordPress Training – Courses plugin <= 2.0.1 - Arbitrary File Upload vulnerability9.9 Critical
- myriad solutionz stars smtp mailerWordPress Stars SMTP Mailer plugin <= 2.2.1 - Arbitrary File Upload vulnerability9.9 Critical
- carrcommunications rsvpmaker, david f. carr rsvpmaker for toastmasters, davidfcarr rsvpmarker +2 moreWordPress RSVPMaker for Toastmasters plugin <= 6.2.4 - Arbitrary File Upload vulnerability10.0 Critical
- aipower, senols ai puffer – your ai engine for wordpress (formerly ai power) +1 moreAI Power: Complete AI Pack <= 1.8.89 - Unauthenticated Arbitrary File Upload9.8 Critical
- std42 elfinderStudio-42 eLfinder 2.1.62 is vulnerable to Remote Code Execution (RCE) as there is no restriction...9.8 Critical
- web and print design ar for woocommerceWordPress AR For Woocommerce plugin <= 6.3 - Arbitrary File Upload vulnerability10.0 Critical
- david donisa wp donimedia carouselWordPress WP donimedia carousel plugin <= 1.0.1 - Arbitrary File Upload vulnerability9.9 Critical
- Show moreLoading…