CWE-434

An unrestricted upload of file with dangerous type vulnerability in SUNNET Corporate Training Management System before 1

The Doccure Core plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the

File Upload vulnerability in SueamCMS v.0.1.2 allows a remote attacker to execute arbitrary code via the lack of filteri

Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 1.0.735 and Application prior to 20.0.1330

The Podlove Podcast Publisher plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type vali

The Product Options and Price Calculation Formulas for WooCommerce – Uni CPO (Premium) plugin for WordPress is vulnerabl

Due to client-controlled permission check parameter, PAD CMS's file upload functionality allows an unauthenticated remot

Due to client-controlled permission check parameter, PAD CMS's photo upload functionality allows an unauthenticated remo

Due to client-controlled permission check parameter, PAD CMS's upload photo functionality allows an unauthenticated remo

The Ovatheme Events Manager plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type valida

The Flex QR Code Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validat

Some versions of Hikvision's iSecure Center Product have an improper file upload control vulnerability. Due to the impro

An arbitrary file upload vulnerability in SigningHub v8.6.8 allows attackers to execute arbitrary code via uploading a c

The PPOM – Product Addons & Custom Fields for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads d

Document Management System developed by Excellent Infotek has an Arbitrary File Upload vulnerability, allowing unauthent

The WooCommerce Designer Pro plugin for WordPress, used by the Pricom - Printing Company & Design Services WordPress the

The Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent plugin for WordPress is vulnerable to

The Easy Upload Files During Checkout plugin for WordPress is vulnerable to arbitrary JavaScript file uploads due to mis

The KiotViet Sync plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in th

A vulnerability in the Java Remote Method Invocation (RMI) process of Cisco Unified CCX could allow an unauthenticated,

The Gravity Forms plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in th

Monsta FTP versions 2.11 and earlier contain a vulnerability that allows unauthenticated arbitrary file uploads. This fl

Employee Records System version 1.0 contains an unrestricted file upload vulnerability that allows a remote unauthentica

The WP移行専用プラグイン for CPI plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation

Unlimited upload vulnerability for dangerous file types in WinPlus v24.11.27 from Informática del Este. This vulnerabili

DzzOffice v2.3.7 and before is vulnerable to Arbitrary File Upload in /dzz/system/ueditor/php/controller.php.

The Mozart FM Transmitter web management interface on version WEBMOZZI-00287, contains an unauthenticated file upload vu

The WavePlayer WordPress plugin before 3.8.0 does not have authorization in an AJAX action as well as does not validate

AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 include a web administration

AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 expose an unauthenticated ba

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to arbitrary file uploads due

The CIBELES AI plugin for WordPress is vulnerable to arbitrary file uploads due to missing capability check in the 'actu

The AI Feeds plugin for WordPress is vulnerable to arbitrary file uploads due to missing capability check in the 'actual

Unauthenticated Arbitrary File Upload (status_contents.php) in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmi

Unauthenticated Arbitrary File Upload (upgrade_contents.php) in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transm

Unauthenticated Arbitrary File Upload (patch_contents.php) in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmit

The Flex QR Code Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validat

PipesHub is a fully extensible workplace AI platform for enterprise search and workflow automation. Versions prior to 0.

QiHang Media Web Digital Signage 3.0.9 contains an unauthenticated remote code execution vulnerability in the QH.aspx fi

An arbitrary file rename vulnerability in the /admin/manager.php component of EasyImages 2.0 v2.8.6 and below allows att

Soosyze 2.0.0 contains a file upload vulnerability that allows attackers to upload arbitrary HTML files with embedded PH

SitemagicCMS 4.4.3 contains a remote code execution vulnerability that allows attackers to upload malicious PHP files to

TinyWebGallery v2.5 contains a remote code execution vulnerability in the admin upload functionality that allows unauthe

InnovaStudio WYSIWYG Editor 5.4 contains an unrestricted file upload vulnerability that allows attackers to bypass file

The File Uploader for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type

ProjectSend r1605 contains a remote code execution vulnerability that allows attackers to upload malicious files by mani

Cadmium CMS v.0.4.9 has a background arbitrary file upload vulnerability in /admin/content/filemanager/uploads.

WMPro developed by Sunnet has a Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload

BPMFlowWebkit developed by WELLTEND TECHNOLOGY has a Arbitrary File Upload vulnerability, allowing unauthenticated remot

File upload vulnerability in machsol machpanel 8.0.32 allows attacker to gain a webshell.