CWE-434: Unrestricted File Upload
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.
Also known as Unrestricted Upload of File with Dangerous Type.
A kind of CWE-669 Incorrect Resource Transfer Between Spheres.
From the CWE List. © The MITRE Corporation.
Newest
- yootheme.com yootheme pro extension for joomlaJoomla Extension - yootheme.com - Unauthenticated remote code execution in YOOtheme Pro 5.0.0-5.0.5210.0 Critical
- momotommy file-management-systemfile-management-system FileController.php store unrestricted upload6.9 Medium
- oretnom23 file-management-system-phporetnom23 file-management-system-php admin_class.php save_files unrestricted upload6.9 Medium
- kitae park mang board wpWordPress Mang Board WP plugin <= 2.4.4 - Arbitrary File Upload vulnerability9.9 Critical
- brandtoss wp mailster, wp mailster mailster +1 moreWordPress WP Mailster plugin <= 1.9.1.0 - Arbitrary File Upload vulnerability10.0 Critical
- polonel trudeskTrudesk through 1.2.11 Unrestricted File Upload via /settings/general/uploadlogo5.1 Medium
- ibm cyber fraudIBM Cyber Fraud includes components with multiple known vulnerabilities6.8 Medium
- draytek vigor2960DrayTek Vigor2960 commonupload mainfunction.cgi unrestricted upload5.3 Medium
- arizu-id fast-tunnelarizu-id fast-tunnel Plugin Installer api_plugins.php extractTo unrestricted upload5.3 Medium
- eptura archibusEptura Archibus Workflow Rule Enables Unauthenticated Arbitrary File Upload Leading to Remote Code Execution9.6 Critical
- vraj404 criminal-management-systemvraj404 Criminal-Management-System home.php move_uploaded_file unrestricted upload6.9 Medium
- pt norther lights production mapsvgWordPress MapSVG plugin <= 8.16.1 - Arbitrary File Upload vulnerability9.9 Critical
- samuelgallegos doublescale crm | all-in-one crm – sales, multi-channel marketing, newsletter, booking, helpdesk, automation, mcp & moreDoubleScale | All-in-One CRM <= 1.5.1 - Authenticated (Subscriber+) Arbitrary File Upload via Portal 'ticketless' Attachment Endpoint8.8 High
- yaycommerce yaysmtp – wp mail smtp with email logs, tracking & reportsYaySMTP <= 2.7.7 - Authenticated (Subscriber+) Arbitrary File Upload via Attachment Filename Extension8.8 High
- elextensions elex wordpress helpdesk & customer ticketing systemELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.7 - Unauthenticated Arbitrary File Upload via IMAP Email Attachment9.8 Critical
- kitae-park mang boardMang Board - 2.4.4 - Unauthenticated Arbitrary File Upload via 'image_path' Parameter9.8 Critical
- energizelab fastapi ai inference serverEnergizeLab Eilik AI Skill Upload Unauthenticated Path Traversal Arbitrary File Write9.1 Critical
- 10web booster – website speed optimization, cache & page speed optimizer10Web Booster <= 2.34.10 - Unauthenticated Arbitrary File Upload via 'page_id' Parameter9.8 Critical
- error311 fileriseFileRise: ZIP extraction writes blocked file extensions to disk, bypassing the upload blocklist6.5 Medium
- foliovision fv flowplayer video player, fv flowplayer video player flowplayer video player +1 moreFV Flowplayer Video Player <= 7.5.54.7212 - Authenticated (Subscriber+) Arbitrary File Upload via 'video_url' Parameter8.8 High
- ntbyk jtl-connector for woocommerceJTL-Connector for WooCommerce <= 2.4.3 - Unauthenticated Arbitrary File Upload via 'image.push' Method9.8 Critical
- streetforce1 age-gateAGE-GATE <= 1.0 - Unauthenticated Remote Code Execution via PHP Code Injection via 'width'/'height' Parameters to Standalone admin.php9.8 Critical
- snazzyplugins snazzy social media feedSnazzy Social Media Feed <= 2.5 - Unauthenticated Arbitrary File Upload via 'pluginURL' Parameter9.8 Critical
- printcart store – web to print product designer for woocommercePrintcart Store - Web to Print Product Designer for WooCommerce (PCDesigner) <= 2.9.1 - Unauthenticated Arbitrary File Upload to Remote Code Execution via nbdesigner_copy_image_from_url9.8 Critical
- adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Unrestricted Upload of File with Dangerous Type (CWE-434)10.0 Critical
- opencatsOpenCATS: Authenticated RCE in the Import module9.1 Critical
- phpwcmsslackero phpwcms Extension Check cnt23.article.inc.php unrestricted upload6.9 Medium
- owthub library management systemSourceCodester Library Management System add_admin.php move_uploaded_file unrestricted upload6.9 Medium
- sourcecodester e-learning systemSourceCodester E-Learning System Users.php save_users unrestricted upload6.9 Medium
- sourcecodester contact tracing systemSourceCodester Contact Tracing System Users.php move_uploaded_file unrestricted upload6.9 Medium
- cmsjunkie - wordpress business directory plugins wp-businessdirectoryWP-BusinessDirectory <= 4.0.2 - Unauthenticated Arbitrary File Write via uploadFile5.3 Medium
- kusalkasilva learning-management-systemKusalkaSilva Learning-Management-System upload_save.php getimagesize unrestricted upload5.3 Medium
- theliaThelia before 3.1.2 and 3.2.x before 3.2.1 File Upload RCE via Filename Trailing Space8.6 High
- theliaCVE-2026-1035358.8 High
- theliaCVE-2026-1035295.4 Medium
- theliaCVE-2026-1035227.2 High
- theliaCVE-2026-1035217.2 High
- prasathmani tinyfilemanagerprasathmani TinyFileManager tinyfilemanager.php move_uploaded_file unrestricted upload5.3 Medium
- unknown veeqo for woocommerceVeeqo for WooCommerce <= 2.2.8 - Subscriber+ Arbitrary File Upload via start_veeqo_connection_process4.3 Medium
- unknown anton extensionsAnton Extensions <= 1.2.2 - Unauthenticated Arbitrary File Upload to RCE9.8 Critical
- wpfunnels creator lmsWordPress Creator LMS plugin <= 1.2.21 - Arbitrary File Upload vulnerability9.9 Critical
- tailored media toolsWordPress Tailored Tools plugin <= 3.0.3 - Arbitrary File Upload vulnerability9.0 Critical
- codebard help deskWordPress CodeBard Help Desk plugin <= 1.1.2 - Arbitrary File Upload vulnerability9.9 Critical
- rank math seo math seo, unknown rank math seo +1 moreRank Math SEO < 1.0.280 - Admin+ Arbitrary File Upload to RCE via Settings Import7.2 High
- foliovision fv player 8FV Player 8 <= 8.1.7 - Authenticated (Subscriber+) Arbitrary File Upload via videos[].fv_wp_flowplayer_field_src Parameter8.8 High
- expivi 3d product configurator for woocommerce3D Product configurator for WooCommerce <= 2.16.2 - Unauthenticated Remote Code Execution via 'xpv_image' Parameter9.8 Critical
- htplugins extensions for cf7 (contact form 7 database, conditional fields and redirection)Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) <= 3.4.5 - Unauthenticated Arbitrary File Upload via Signature Field File Upload9.8 Critical
- pyloadpyLoad: Tar extraction creates device nodes and FIFOs (member types not filtered; tarfile extractall without filter=)9.4 Critical
- ilias-elearning e.v. iliasILIAS before 9.24, 10.12, and 11.5 Unrestricted File Upload via QTI Import8.7 High
- danielbrendel hortusfox-webHortusFox through 6.3 Unrestricted File Upload via Plant Attachments7.7 High
- Show moreLoading…