CWE-434: Unrestricted File Upload
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.
Also known as Unrestricted Upload of File with Dangerous Type.
A kind of CWE-669 Incorrect Resource Transfer Between Spheres.
From the CWE List. © The MITRE Corporation.
Newest
- px-lab zombifyWordPress Zombify plugin <= 1.7.7 - Arbitrary File Upload vulnerability10.0 Critical
- strategy11team awp classifiedsAWP Classifieds < 4.4.9 - Admin+ Arbitrary File Upload via ZIP Import8.8 High
- izometri it services domestic and foreign trade co. ltd. eimzamipRemote Code Execution via Unrestricted File Upload in İzometri Informatics' eimzamip7.3 High
- bricksforgeBricksforge <= 3.1.8.9 - Unauthenticated Arbitrary File Upload via 'temporaryFileUploads' Parameter9.8 Critical
- webrehab super forms – drag & drop form builderSuper Forms <= 6.3.316 - Unauthenticated Arbitrary Directory Deletion via 'data[...][files][][subdir]' Parameter9.1 Critical
- webrehab super forms – drag & drop form builderSuper Forms <= 6.3.316 - Authenticated (Subscriber+) Arbitrary File Upload via 'extensions' Form Element Attribute8.8 High
- bugtracker.netUnrestricted Upload of File with Dangerous Type in BugTracker.NET7.5 High
- payloadcms payloadPayload: Uploaded XML files could execute same-origin JavaScript8.6 High
- payloadcms payloadPayload: Bypassed sanitization of user uploaded SVGs8.7 High
- danielbrendel hortusfox-webHortusFox < 6.2 Remote Code Execution via Theme Import8.6 High
- amentotech doctreatWordPress Doctreat theme <= 1.7.0 - Arbitrary File Upload vulnerability10.0 Critical
- amentotech workreap coreWordPress Workreap Core plugin <= 3.4.5 - Arbitrary File Upload vulnerability9.9 Critical
- amentotech taskbotWordPress Taskbot plugin <= 6.6 - Arbitrary File Upload vulnerability9.9 Critical
- revmakx wp duplicateWordPress WP Duplicate plugin <= 1.1.11 - Arbitrary File Upload vulnerability9.9 Critical
- kognetiks chatbot for wordpressWordPress Kognetiks Chatbot for WordPress plugin <= 2.4.9 - Arbitrary File Upload vulnerability10.0 Critical
- mauro cassani acpt (premium)ACPT (Premium) <= 2.0.66 - Authenticated (Subscriber+) Remote Code Execution via REST API Email Template8.8 High
- viewsonic vcastCVE-2026-829887.5 High
- feelec-yishu feelcrm-osfeelec-yishu feelcrm-os UploadTicketFile Endpoint UploadController.class.php unrestricted upload5.3 Medium
- tryghost ghostGhost: Stored XSS via SVG Uploads Bypassing Sanitization7.3 High
- tryghost ghostGhost: Stored XSS via SVG Files in Content Imports6.8 Medium
- makeplane planePlane: Stored XSS via SVG attachment served inline on the application origin (account takeover)8.7 High
- kunstmaan bundles-cms, kunstmaanbundlescms, media-bundle +2 moreKunstmaan CMS: MediaBundle extension blacklist bypass allows authenticated administrators to upload executable PHP files leading to remote code execution7.2 High
- mitel mivoice office 400Mitel MiVoice Office 400 Music on Hold WAV File Upload Code Execution8.4 High
- mitel mivoice office 400Mitel MiVoice Office 400 Backup Restoration Arbitrary File Write Leading to Root Code Execution8.5 High
- vincent-peugnet wcmsW (wcms) through 3.18.0 RCE and Arbitrary File Write via Media Upload API8.7 High
- hkuds vibe-tradingHKUDS Vibe-Trading before 0.1.7 Missing Authentication in FastAPI Server Enabling RCE9.3 Critical
- h3c cvmH3C CVM Unauthenticated File Upload via fileUpload/upload Token9.3 Critical
- onetwothreeneth hospitalmanagementsystemonetwothreeneth HospitalManagementSystem controller.php edit_patient unrestricted upload6.9 Medium
- yeswikiYesWiki before 4.6.7 Unrestricted File Upload via Bazar CSV Import8.6 High
- tryghost ghostGhost: Stored XSS via Bookmark Card Images7.3 High
- tryghost ghostGhost 5.94.0 before 6.64.0 Stored XSS via Bookmark Card Images8.5 High
- tryghost ghostGhost: Stored XSS via File Uploads on Local Storage7.3 High
- tryghost ghostGhost 6.22.1 before 6.64.0 Stored XSS via Local Storage File Uploads8.5 High
- saturdaydrive ninja forms - file uploadsNinja Forms - File Uploads <= 3.3.34 - Unauthenticated Arbitrary File Upload8.1 High
- getsimplecms-ceGetSimple CMS: CSRF, SSRF, and Unrestricted Zip Extraction9.1 Critical
- pandora fms fmsUnrestricted File Upload Leading to Remote Code Execution in Admin Tools File Manager8.6 High
- pandora fms fmsCSRF Bypass Leading to Remote Code Execution via Unrestricted File Upload in Plugin File Manager7.5 High
- formtools.org form toolsformtools.org Form Tools Ajax actions.php uploadFile unrestricted upload5.3 Medium
- genians, inc genian ssl pns (frodo-core), genian ssl pns (watchcat-ui) +1 moreGenians, Inc Genian SSL PNS Unrestricted File Upload1.8 Low
- accellion kiteworks, kiteworks email protection gateway +1 moreKiteworks Email Protection Gateway Remote Code Execution7.2 High
- accellion kiteworks, kiteworks core +1 moreKiteworks Core Unrestricted Upload of File with Dangerous Type4.1 Medium
- accellion kiteworks, kiteworks email protection gateway +1 moreKiteworks Email Protection Gateway Unrestricted Upload of File with Dangerous Type7.5 High
- yii2-starter-kityii2-starter-kit through 4.2.0 Unrestricted File Upload RCE8.7 High
- ordasoft joomla cck, ordasoft.com ordasoft joomla cck +1 moreJoomla Extension - ordasoft.com - Unauthenticated Remote Code Execution in OrdaSoft Joomla CCK < 8.3.1610.0 Critical
- digiwin easyflow .netDigiWin｜EasyFlow .NET - Arbitrary File Upload8.6 High
- unknown zella themeZella Theme < 2.6.3 - Unauthenticated Arbitrary File Upload9.8 Critical
- gedelumbung hospitalmanagementgedelumbung HospitalManagement KCFinder File Manager app_user_login_model.php cekUserLogin unrestricted upload5.3 Medium
- shopify tophat, toptech systems tms7 +1 moreToptech TMS7 and TopHAT Unrestricted Upload of File with Dangerous Type9.4 Critical
- flowring technology corp agentflow 4.0Flowring Agentflow 4.0 - Unrestricted Upload of File with Dangerous Type9.3 Critical
- mwasikz robo-cafe-rmsmwasikz robo-cafe-rms manage-food.php unrestricted upload5.1 Medium
- Show moreLoading…