CVE-2026-111311 | High | 8.8 | 2026-10-16 | The DoubleScale | All-in-One CRM – Sales, Multi-Channel Marketing, Newsletter, Booking, Helpdesk, Automation, MCP & More plugin for WordPress is vulnerable to… |
CVE-2026-92553 | High | 8.8 | 2026-10-16 | The YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including… |
CVE-2026-103768 | Critical | 9.8 | 2026-10-16 | The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.3.7… |
CVE-2026-109219 | Critical | 9.8 | 2026-10-16 | The Mang Board plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.4.4 via the mbw_file_upload function. This i… |
CVE-2026-105032 | Critical | 9.1 | 2026-10-15 | The EnergizeLab Eilik and EilikO AI skill upload endpoint, served by the FastAPI AI inference and profiling services, does not require authentication and does… |
CVE-2026-108587 | Critical | 9.8 | 2026-10-15 | The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to… |
CVE-2026-57491 | Medium | 6.5 | 2026-10-14 | FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.16.0, FileRise archive extraction does not a… |
CVE-2026-86461 | High | 8.8 | 2026-10-14 | The FV Flowplayer Video Player plugin for WordPress is vulnerable to Limited Arbitrary File Upload in all versions up to, and including, 7.5.54.7212 via the ch… |
CVE-2026-87855 | Critical | 9.8 | 2026-10-14 | The JTL-Connector for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.4.3 via the saveImage() f… |
CVE-2026-104800 | Critical | 9.8 | 2026-10-14 | The AGE-GATE plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.0 via the 'width (and height)' parameter param… |
CVE-2026-110002 | Critical | 9.8 | 2026-10-14 | The Snazzy Social Media Feed plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.5 via the (file scope) functio… |
CVE-2026-93388 | Critical | 9.8 | 2026-10-14 | The Printcart Store (PCDesigner / NB Designer) plugin for WooCommerce is vulnerable to unauthenticated arbitrary file upload leading to remote code execution i… |
CVE-2026-105899 | Critical | 10.0 | 2026-10-13 | ColdFusion is affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution in the context of the… |
CVE-2026-54454 | Critical | 9.1 | 2026-10-13 | OpenCATS is an open-source applicant tracking system and recruitment CRM for staffing agencies and hiring teams. Prior to 0.10.0, the OpenCATS Import module in… |
CVE-2026-110025 | High | 7.3 | 2026-10-13 | A flaw has been found in slackero phpwcms up to 1.9.49/1.12.3. This issue affects some unknown processing of the file include/inc_front/content/cnt23.article.i… |
CVE-2026-108975 | High | 7.3 | 2026-10-13 | A security flaw has been discovered in SourceCodester Library Management System 1.0. This vulnerability affects the function move_uploaded_file of the file adm… |
CVE-2026-108974 | High | 7.3 | 2026-10-13 | A vulnerability was identified in SourceCodester E-Learning System 1.0. This affects the function save_users of the file /classes/Users.php?f=save. Such manipu… |
CVE-2026-108973 | High | 7.3 | 2026-10-13 | A vulnerability was determined in SourceCodester Contact Tracing System 1.0. Affected by this issue is the function move_uploaded_file of the file /classes/Use… |
CVE-2026-89271 | Medium | 5.3 | 2026-10-13 | The WP-BusinessDirectory WordPress plugin through 4.0.2 does not restrict the type or destination of files saved by an unauthenticated upload handler, allowin… |
CVE-2026-108922 | Medium | 6.3 | 2026-10-12 | A flaw has been found in KusalkaSilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. Affected is the function getimagesize of the f… |
CVE-2026-109397 | High | 7.2 | 2026-10-12 | Thelia before 3.1.2 and 3.2.x before 3.2.1 contains an unrestricted file upload vulnerability that allows authenticated back-office users to upload PHP files b… |
CVE-2026-103535 | High | 8.8 | 2026-10-12 | Thelia v2.6.1 contains path traversal and PHP code injection vulnerabilities in its translation editor that can be chained to achieve remote code execution. Th… |
CVE-2026-103529 | Medium | 5.4 | 2026-10-12 | Thelia v2.6.0 permits authenticated administrators to upload and install modules via the ZIP upload function without validating or sandboxing embedded PHP code… |
CVE-2026-103522 | High | 7.2 | 2026-10-12 | In Thelia v2.6.0, the store banner upload feature performs insufficient filetype validation that relies exclusively on client‑supplied MIME types. An attacker… |
CVE-2026-103521 | High | 7.2 | 2026-10-12 | In Thelia v2.6.0, the document upload endpoint properly blocks the upload of executable file types, but the document update endpoint does not perform the same… |
CVE-2026-108801 | Medium | 6.3 | 2026-10-12 | A security flaw has been discovered in prasathmani TinyFileManager up to 2.6. The impacted element is the function move_uploaded_file of the file tinyfilemanag… |
CVE-2026-93550 | Medium | 4.3 | 2026-10-11 | The Veeqo for WooCommerce WordPress plugin through 2.2.8 does not restrict who can trigger its remote bridge-installation process or validate the URL it is giv… |
CVE-2026-104028 | Critical | 9.8 | 2026-10-11 | The Anton Extensions WordPress plugin through 1.2.2 does not perform any capability check, nonce verification, or file-type validation before writing attacker-… |
CVE-2026-62129 | Critical | 9.9 | 2026-10-10 | Contributor Arbitrary File Upload in Creator LMS <= 1.2.21 versions. |
CVE-2026-62025 | Critical | 9.0 | 2026-10-10 | Unauthenticated Arbitrary File Upload in Tailored Tools <= 3.0.3 versions. |
CVE-2026-62024 | Critical | 9.9 | 2026-10-10 | Subscriber Arbitrary File Upload in CodeBard Help Desk <= 1.1.2 versions. |
CVE-2026-83526 | High | 8.8 | 2026-10-10 | The FV Player 8 plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 8.1.7 via the check_mimetype function. This i… |
CVE-2026-104752 | High | 7.2 | 2026-10-10 | The Rank Math SEO WordPress plugin before 1.0.280 does not correctly validate the type of a file uploaded through its settings import feature, allowing users… |
CVE-2026-103889 | Critical | 9.8 | 2026-10-10 | The 3D Product configurator for WooCommerce plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.16.2 via the 'x… |
CVE-2026-94589 | Critical | 9.8 | 2026-10-10 | The Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) plugin for WordPress is vulnerable to Arbitrary File Upload in all version… |
CVE-2026-108113 | High | 8.8 | 2026-10-09 | ILIAS before 9.24, 10.12, and 11.5 contains an unrestricted file upload vulnerability in QTI question import image handling (ilQtiMatImageSecurity) that allows… |
CVE-2026-108101 | High | 7.5 | 2026-10-09 | HortusFox (hortusfox-web) through 6.3 contains an unrestricted file upload vulnerability in PlantAttachmentModel that allows authenticated users to store files… |
CVE-2026-94503 | Critical | 10.0 | 2026-10-09 | Unrestricted Upload of File with Dangerous Type vulnerability in PX-lab Zombify zombify allows Upload a Web Shell to a Web Server.This issue affects Zombify: f… |
CVE-2025-15700 | High | 8.8 | 2026-10-09 | The AWP Classifieds WordPress plugin before 4.4.9 does not validate the type of files extracted from an uploaded ZIP archive during its listing-import feature… |
CVE-2026-91844 | High | 7.3 | 2026-10-08 | Unrestricted upload of file with dangerous type vulnerability in İzometri IT Services Domestic and Foreign Trade Co. Ltd. Eimzamip allows Using Malicious Files… |
CVE-2026-85097 | Critical | 9.8 | 2026-10-08 | The Bricksforge plugin for WordPress is vulnerable to unauthenticated arbitrary file upload in versions up to, and including, 3.1.8.9. This is due to insuffici… |
CVE-2026-17609 | Critical | 9.1 | 2026-10-08 | The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Arbitrary Directory Deletion in all versions up to, and including, 6.3.316 via… |
CVE-2026-17196 | High | 8.8 | 2026-10-08 | The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Unrestricted File Type Upload in all versions up to, and including, 6.3.316 vi… |
CVE-2026-92532 | | | 2026-10-07 | Unrestricted file upload vulnerability in the BugTracker.NET attachment functionality. An authenticated user with administrator privileges could modify the app… |
CVE-2026-105868 | High | 7.1 | 2026-10-06 | Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, local upload config… |
CVE-2026-105862 | High | 8.7 | 2026-10-06 | Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, a collection that a… |
CVE-2026-104069 | High | 7.2 | 2026-10-06 | HortusFox before 6.2 contains a remote code execution vulnerability in ThemeModule::startImport() where an uploaded ZIP archive is extracted directly into the… |
CVE-2026-39770 | Critical | 10.0 | 2026-10-06 | Unauthenticated Arbitrary File Upload in Doctreat <= 1.7.0 versions. |
CVE-2026-39759 | Critical | 9.9 | 2026-10-06 | Employer / Sales Representative Arbitrary File Upload in Workreap Core <= 3.4.5 versions. |
CVE-2026-39757 | Critical | 9.9 | 2026-10-06 | Subscriber Arbitrary File Upload in Taskbot <= 6.6 versions. |
CVE-2026-39755 | Critical | 9.9 | 2026-10-06 | Subscriber Arbitrary File Upload in WP Duplicate <= 1.1.11 versions. |
CVE-2026-32579 | Critical | 10.0 | 2026-10-06 | Unauthenticated Arbitrary File Upload in Kognetiks Chatbot for WordPress <= 2.4.9 versions. |
CVE-2026-105701 | High | 8.8 | 2026-10-06 | The ACPT (Premium) plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.0.66 via the render function. This is du… |
CVE-2026-82988 | High | 7.5 | 2026-10-06 | There exists an arbitrary file download in vCast APK delivery mechanism in ViewSonic ViewBoard unknown allows a remote, unauthenticated attacker to trigger unp… |
CVE-2026-105679 | High | 7.3 | 2026-10-05 | Ghost is a Node.js content management system. From 6.22.1 until 6.64.0, Ghost restricted the content type used to serve uploaded files to prevent browsers from… |
CVE-2026-105651 | High | 7.3 | 2026-10-05 | Ghost is a Node.js content management system. From 5.94.0 until 6.64.0, when creating a bookmark card, Ghost could store non-image files fetched from an extern… |
CVE-2026-105649 | High | 7.3 | 2026-10-05 | Ghost is a Node.js content management system. From 4.22.0 until 6.65.0, SVG media thumbnails and SVG images uploaded with a non-SVG file extension were stored… |
CVE-2026-105389 | Medium | 6.3 | 2026-10-05 | A security vulnerability has been detected in feelec-yishu feelcrm-os 1.0.0. This issue affects some unknown processing of the file App/Feelcrm/Crm/Controller/… |
CVE-2026-105644 | Medium | 6.8 | 2026-10-05 | Ghost is a Node.js content management system. From 4.0.0 until 6.67.0, SVG images included in content imports were stored without sanitization. An attacker who… |
CVE-2026-105630 | High | 8.7 | 2026-10-05 | Plane is an open-source project management tool. Prior to 1.4.0, an authenticated low-privilege workspace member, including a Guest, can upload an image/svg+xm… |
CVE-2026-104890 | High | 7.2 | 2026-10-05 | Kunstmaan CMS is an open source content management system based on the Symfony framework. Prior to 7.3.2, src/Kunstmaan/MediaBundle/Helper/File/FileHandler.php… |
CVE-2026-104811 | | | 2026-10-05 | DigitalCanion SA has discovered a vulnerability that allows remote attackers to execute arbitrary code on affected installations of the product. Authentication… |
CVE-2026-104805 | | | 2026-10-05 | DigitalCanion has discovered a vulnerability in the backup restoration functionality that allows an attacker with access to the configured backup repository to… |
CVE-2026-105123 | High | 8.8 | 2026-10-04 | W (vincent-peugnet/wcms) through 3.18.0 contains a remote code execution vulnerability that allows authenticated editors to write arbitrary files by abusing th… |
CVE-2023-54405 | Critical | 9.8 | 2026-10-02 | H3C CVM, the Cloud Virtualization Management component of the H3C CAS cloud platform, contains an unauthenticated arbitrary file upload vulnerability in the /c… |
CVE-2026-104637 | High | 7.3 | 2026-10-02 | A weakness has been identified in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. The affected element is the function… |
CVE-2026-104471 | High | 7.2 | 2026-10-02 | YesWiki before 4.6.7 contains an unrestricted file upload vulnerability that allows authenticated admins to write remote files into the web-accessible files/ d… |
CVE-2026-92820 | High | 8.1 | 2026-10-02 | The Ninja Forms - File Uploads plugin for WordPress is vulnerable to arbitrary file operations in all versions up to, and including, 3.3.34 via the external (A… |
CVE-2026-56660 | Critical | 9.1 | 2026-10-01 | GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS. Prior to version 1.5, the update handler in Upda… |
CVE-2026-64949 | | | 2026-10-01 | Incomplete extension blacklist in the File Manager module allows authenticated upload and execution of arbitrary .phar files. Affects Pandora FMS from 777 onwa… |
CVE-2026-64947 | | | 2026-10-01 | A chained CSRF bypass and unrestricted file upload vulnerability in the Plugin File Manager allows an attacker to upload and execute arbitrary PHP code, result… |
CVE-2026-103541 | Medium | 6.3 | 2026-10-01 | A vulnerability was detected in formtools.org Form Tools up to 3.1.1. This issue affects the function Files::uploadFile of the file global/code/actions.php of… |
CVE-2026-76144 | | | 2026-10-01 | An unrestricted file upload vulnerability caused by insufficient file extension and integrity verification in Genian SSL PNS allows an attacker to upload a dan… |
CVE-2026-102143 | High | 7.5 | 2026-09-30 | An unauthenticated attacker could cause a file with attacker-controlled content to be written to the appliance filesystem through an administrative upload hand… |
CVE-2026-102137 | Medium | 4.1 | 2026-09-30 | An authenticated administrator could bypass the content validation applied to an administrative file upload and store a file containing dangerous content on th… |
CVE-2026-102130 | High | 7.2 | 2026-09-30 | Kiteworks Email Protection Gateway did not sufficiently validate the content of an uploaded backup, and allowed an administrator to influence how the applicati… |
CVE-2026-103474 | High | 8.8 | 2026-09-30 | yii2-starter-kit through 4.2.0 fails to validate file types in the backend storage upload actions, allowing authenticated managers to upload PHP files. Attacke… |
CVE-2026-102427 | Critical | 10.0 | 2026-09-30 | Joomla Extension - ordasoft.com - Unauthenticated Remote Code Execution in OrdaSoft Joomla CCK < 8.3.16 - site/uploader.php is reached through the component’s… |
CVE-2026-102454 | High | 7.2 | 2026-09-30 | EasyFlow .NET developed by Digiwin has an Arbitrary File Upload vulnerability. Privileged remote attackers can upload and execute web shell backdoors, thereby… |
CVE-2026-75873 | Critical | 9.8 | 2026-09-30 | The Zella Theme WordPress theme before 2.6.3 does not perform any capability or nonce check on one of its font upload actions, which is available to unauthenti… |
CVE-2026-102842 | Medium | 6.3 | 2026-09-30 | A vulnerability was identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Affected by this issue is the function app_use… |
CVE-2026-70356 | Critical | 9.1 | 2026-09-29 | The TMS file upload endpoint fails to enforce server-side file type restrictions, allowing an attacker to upload and execute arbitrary PHP files on the web ser… |
CVE-2026-96431 | | | 2026-09-29 | Unrestricted Upload of File with Dangerous Type in the
/WebAgenda/download/uploadFile.jsp API endpoint of Flowring Agentflow 4.0 version
before 2023/03/24 allo… |
CVE-2026-102263 | Medium | 4.7 | 2026-09-29 | A vulnerability has been found in mwasikz robo-cafe-rms up to 228c44a02823f04e85db32b7137809a2856148fc. The affected element is an unknown function of the file… |
CVE-2026-102366 | Medium | 4.4 | 2026-09-29 | mall4j through 4.0 contains an unrestricted file upload vulnerability in FileController endpoints that lack authorization checks and accept arbitrary file type… |
CVE-2026-54675 | | | 2026-09-28 | FreePBX is an open source IP PBX. Prior to versions 16.0.10 and 17.0.5, a critical vulnerability exists in the sound language upload and conversion functionali… |
CVE-2026-101071 | Medium | 6.3 | 2026-09-28 | A vulnerability was determined in Acrel Electric Unet Web Service up to 20260814. This vulnerability affects unknown code of the file /exchange/attachment/uplo… |
CVE-2026-12264 | High | 8.8 | 2026-09-28 | Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Arbitrary file write via HA Failover Config sync upload leading to remote code executi… |
CVE-2026-12269 | High | 8.8 | 2026-09-28 | Zohocorp ManageEngine DDI Central 6.2.0 build below 6201 had a Keepalived configuration injection vulnerability in the HA configuration workflow. This issue co… |
CVE-2026-85134 | High | 8.8 | 2026-09-28 | Unrestricted upload of file with dangerous type vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document and Workflow Management System allows Up… |
CVE-2026-82901 | Critical | 9.8 | 2026-09-26 | The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Arbitrary File Upload due to insufficient file type validation in the 'uacf7_wpcf7_ma… |
CVE-2026-94132 | | | 2026-09-26 | Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterprise extension < 11.1.0 - MIME parts of i… |
CVE-2026-18143 | Critical | 9.8 | 2026-09-26 | The Request a Quote for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.9.2 via the `afrfq_subm… |
CVE-2026-100389 | High | 8.1 | 2026-09-25 | GestSup versions before 3.2.62 contain a remote code execution vulnerability in the basic IMAP connector's attachment handling that fails to skip blocked file… |
CVE-2026-42322 | Critical | 9.1 | 2026-09-25 | Piwigo is a full featured open source photo gallery application for the web. Prior to 16.4.0, admin/themes_standard_pages.php validates uploaded logo content b… |
CVE-2026-13249 | Critical | 9.8 | 2026-09-24 | An unauthenticated Remote Code Execution via Arbitrary File Upload vulnerability in the web management interface in Honeywell PD45 Industrial Printer version F… |
CVE-2026-13248 | High | 8.8 | 2026-09-24 | An Authenticated Remote Code Execution via Arbitrary File Write in the Intermec Fingerprint Command Interface vulnerability in the web management interface in… |
CVE-2026-96515 | | | 2026-09-24 | This
vulnerability exists in the Netlink ICT HG323RW router due to insufficient
authorization and input validation controls in the diagnostic script import
fun… |
CVE-2026-93352 | Critical | 9.8 | 2026-09-23 | Laravel-Mediable 7.0.0 before 7.0.2 contains an incomplete patch for CVE-2026-49972 in which the .pht extension is absent from the forbidden_extensions blockli… |
CVE-2026-96513 | High | 7.3 | 2026-09-23 | A security flaw has been discovered in Neethuharii CafeManagement. This issue affects some unknown processing of the file AddProductCode.php. The manipulation… |