CWE-434: Unrestricted File Upload
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.
Also known as Unrestricted Upload of File with Dangerous Type.
A kind of CWE-669 Incorrect Resource Transfer Between Spheres.
From the CWE List. © The MITRE Corporation.
Newest
- unknown webinfosWebinfos <= 1.2 - Unauthenticated Arbitrary File Upload9.8 Critical
- unknown theme demo importTheme Demo Import <= 1.1.3 - Admin+ Arbitrary File Upload7.2 High
- unknown everest toolkitEverest Toolkit <= 1.2.3 - Admin+ Arbitrary File Upload7.2 High
- opnsense coreRedaxo has a Mediapool isAllowedExtension bypass via multi-segment filename that leads to authenticated RCE on Apache mod_php multi-extension handlers7.5 High
- johnson controls fm systems employee, johnsoncontrols fms employee +1 moreFMS Employee Allows Upload of Unrestricted Files4.8 Medium
- realtyna organic idx plugin + wpl real estate, unknown realtyna organic idx plugin + wpl real estate +1 moreRealtyna Organic IDX plugin + WPL Real Estate <= 5.3.0 - Authenticated (Subscriber+) Arbitrary File Upload8.8 High
- realtyna organic idx plugin + wpl real estate, unknown realtyna organic idx plugin + wpl real estate +1 moreRealtyna Organic IDX plugin + WPL Real Estate <= 5.2.0 - Unauthenticated Arbitrary File Upload via 'files[file]' Parameter via Public I/O 'set_property' Command9.8 Critical
- codeigniter4CodeIgniter: Uploaded file extension validation bypass in is_image and mime_in rules9.8 Critical
- wolfcmsWolf CMS 0.8.3.1 Authenticated RCE via FileManagerController File Upload8.7 High
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +1 more +3 moreJupiCore does not perform validation of firmware6.9 Medium
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +1 more +3 moreFile Upload vulnerability5.3 Medium
- ase admin and site enhancements (ase) proAdmin and Site Enhancements (ASE) Pro <= 8.9.0 - Unauthenticated Remote Code Execution via PHP Code Injection via cfgroup[input] Repeater Row Key9.8 Critical
- balbooa gridbox, balbooa.com gridbox extension for joomla +1 moreJoomla Extension - balbooa.com - Authenticated arbitrary file upload in Gridbox < 2.20.29.4 Critical
- themecomplete extra checkout options - addon for extra product options pluginExtra Checkout Options (addon for Extra Product Options & Add-Ons for WooCommerce) <= 2.3.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Upload in eco_save_settings8.8 High
- an unrestricted scorm file upload vulnerability in koollab lms allowed an authenticated module designer to upload a scorm package containing a php webshell to a publicly accessible directory and execute arbitrary code on the server. koollab lmsUnrestricted image upload vulnerability2.6 Low
- an unrestricted scorm file upload vulnerability in koollab lms allowed an authenticated module designer to upload a scorm package containing a php webshell to a publicly accessible directory and execute arbitrary code on the server. koollab lmsUnrestricted SCORM file upload vulnerability9.9 Critical
- smub easy digital downloads – ecommerce payments and subscriptions made easyEasy Digital Downloads <= 3.6.9 - Authenticated (Shop Manager+) Arbitrary File Upload via 'edd-import-file' Parameter7.2 High
- unknown realtyna organic idx plugin + wpl real estateRealtyna Organic IDX plugin + WPL Real Estate < 5.3.0 - Unauthenticated Arbitrary File Upload to Remote Code Execution9.8 Critical
- wpforms proWPForms Pro <= 1.10.1.1 - Unauthenticated Arbitrary File Write via Chunked Upload Init/Finalize Ordering8.1 High
- sunnet technology co., ltd. corporate training management systemSUNNET Corporate Training Management System - Unrestricted Upload of File with Dangerous Type9.3 Critical
- webの相談所 really simple csv importerWordPress Really Simple CSV Importer plugin <= 1.3 - Arbitrary File Upload vulnerability9.1 Critical
- mapsvgWordPress MapSVG plugin <= 8.14.0 - Arbitrary File Upload vulnerability9.1 Critical
- everpress mailsterWordPress Mailster plugin <= 4.1.17 - Arbitrary File Upload vulnerability9.1 Critical
- rtcamp godam – organize wordpress media library & file manager with unlimited folders for images, videos & moreGoDAM <= 1.12.2 - Unauthenticated Arbitrary File Upload via WPForms File Upload Field9.8 Critical
- n8nn8n before 1.123.67 Arbitrary File Write via Edit Image Node7.7 High
- joomlack.fr page builder ck extension for joomlaJoomla Extension - joomlack.fr - Improper access control in Page Builder CK 1.0.0-3.1.2, 3.4.0-3.4.11, 3.5.0-3.6.29.4 Critical
- gitea open source git serverRelease attachment extension allowlist bypass via web release edit form (variant of CVE-2025-68939)6.5 Medium
- zsadmin2025 zs-adminzsadmin2025 ZS-Admin com.zs.file.controller.SysFileController upload unrestricted upload5.3 Medium
- d-link dns-320D-Link DNS-320 multi_uploadify.php unrestricted upload6.9 Medium
- d-link dns-320D-Link DNS-320 multi_uploadify.php unrestricted upload6.9 Medium
- d-link dns-320D-Link DNS-320 save_ajax.php unrestricted upload6.9 Medium
- d-link dns-320D-Link DNS-320 uploadify.php unrestricted upload6.9 Medium
- d-link dns-320D-Link DNS-320 uploadify.php unrestricted upload6.9 Medium
- d-link dns-320D-Link DNS-320 upload.php unrestricted upload6.9 Medium
- metasoft 美特软件 metacrmMetasoft 美特软件 MetaCRM upload.jsp unrestricted upload6.9 Medium
- freescout-help-desk freescoutFreeScout Vulnerable to Authenticated Remote Code Execution via incomplete upload extension denylist (.pht) — bypass of CVE-2025-484718.8 High
- dj-extensions.com dj-classifieds extension for joomlaJoomla Extension - dj-extensions.com - Unauthenticated arbitrary file upload in DJ-Classifieds < 3.11.210.0 Critical
- dj-extensions.com jdownloads extension for joomlaJoomla Extension - dj-extensions.com - Unauthenticated arbitrary file upload in DJ-jDownloads < 4.1.610.0 Critical
- themexpert.com jmedia extension for joomlaJoomla Extension - themexpert.com - Authenticated arbitrary file upload in JMedia < 1.6.09.4 Critical
- heyformHeyForm has unauthenticated /api/upload endpoint that accepts arbitrary files with no auth/session/form context8.6 High
- heyformHeyForm Vulnerable to Stored XSS via Unauthenticated SVG File Upload6.4 Medium
- jcd windu cmsUnrestricted Upload of File with Dangerous Type in Windu CMS5.3 Medium
- sourcecodester pizzafy ecommerce systemSourceCodester Pizzafy Ecommerce System admin_class_novo.php save_settings unrestricted upload5.1 Medium
- jugmac00 flask-reuploadedFlask-Reuploaded: Extension-denylist bypass via case-folding asymmetry in name-override path (incomplete-fix variant of CVE-2026-27641)7.5 High
- properfraction paid membership plugin, ecommerce, user registration form, login form, user profile & restrict content – profilepressPaid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content <= 4.16.18 - Authenticated (Author+) Limited Unsafe File Upload via upload_mimes Filter Expansion8.8 High
- No product listedAn unauthenticated arbitrary file upload vulnerability in ck_upload_handler.php in Feng Office 3...9.8 Critical
- ivole customer reviews for woocommerceCustomer Reviews for WooCommerce < 5.113.0 - Unauthenticated Arbitrary Media Upload via cr_upload_media6.5 Medium
- dataeaseDataEase: Remote Code Execution (RCE) via Zip Protocol & File Dropper7.1 High
- getgrav gravGrav before 1.0.3 Remote Code Execution via File Upload Extension Bypass5.3 Medium
- unknown kali forms — contact form & drag-and-drop builderKali Forms < 2.4.17 - Unauthenticated Media Upload5.3 Medium
- Show moreLoading…