CWE-434 · Unrestricted Upload of File with Dangerous Type (page 2)
Page 2 of 45 — CVEs classified under CWE-434, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-82780 | High | 8.8 | 2026-09-14 | Unrestricted upload of file with dangerous type issue exists in CONPROSYS TM Series. If a specially crafted file is uploaded by a remote authenticated attacker… |
CVE-2023-34854 | Medium | 6.6 | 2026-09-14 | HotelDruid before 3.0.6 has insufficient file upload sanitation in the backup/restore function. |
CVE-2026-90603 | High | 7.3 | 2026-09-13 | A vulnerability was identified in Anil-matcha Open-Generative-AI up to 1.0.11/2.0.0. Affected by this issue is some unknown functionality of the file /api/uplo… |
CVE-2026-90519 | Medium | 6.3 | 2026-09-13 | A weakness has been identified in PHPGurukul Bank Locker Management System 1.0. Affected is an unknown function of the file /blms/banker/add-locker-form.php. T… |
CVE-2026-90500 | Medium | 6.3 | 2026-09-13 | A weakness has been identified in lenve vhr 1.0-SNAPSHOT. This vulnerability affects the function FastDFSUtils.upload of the file /hr/userface of the component… |
CVE-2026-84171 | Critical | 9.8 | 2026-09-12 | The WP images upload on piclect WordPress plugin through 1.0 does not validate the name or type of uploaded files before writing them to a publicly accessible… |
CVE-2026-81402 | Critical | 9.8 | 2026-09-12 | The DS Ad Rotator WordPress plugin through 0.8 does not perform any capability check, nonce verification, or file-type validation on its image upload handler… |
CVE-2026-81090 | High | 7.2 | 2026-09-12 | The Gpx2Graphics WordPress plugin through 0.3 does not perform a CSRF check when handling file uploads, nor validate the type of the uploaded file, allowing at… |
CVE-2026-8778 | Critical | 9.8 | 2026-09-11 | The MIPL Grouped Checkout Fields for WooCommerce – Customize & Organize Checkout Fields. plugin for WordPress is vulnerable to arbitrary file uploads due to mi… |
CVE-2026-12215 | Medium | 5.3 | 2026-09-11 | The OTP Login & Register Woocommerce plugin for WordPress is vulnerable to Authentication Bypass via OTP Brute Force in all versions up to, and including, 2.7… |
CVE-2026-84063 | Medium | 6.5 | 2026-09-10 | BurgerEditor 3.2.0 through 3.4.0 contains an issue with unrestricted upload of file with dangerous type. If this vulnerability is exploited, an arbitrary file… |
CVE-2026-18351 | Critical | 9.8 | 2026-09-10 | The Drag and Drop File Upload for Elementor Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.6.0 via t… |
CVE-2026-71805 | Critical | 9.8 | 2026-09-09 | An arbitrary file upload and path traversal vulnerability exists in LZ-litchi 1.0.0. Unauthenticated remote attackers can upload arbitrary files and write them… |
CVE-2026-87928 | Medium | 5.4 | 2026-09-09 | MaxSite CMS versions 0.94 through 109.6 contain a cross-site scripting vulnerability in the admin_page upload handler that allows any logged-in user to upload… |
CVE-2026-26212 | High | 7.2 | 2026-09-09 | Rara One Click Demo Import plugin for WordPress before 1.3.5 contains an arbitrary file upload vulnerability that allows authenticated attackers with Administr… |
CVE-2026-54611 | Medium | 5.5 | 2026-09-08 | InstantCMS is a free and open source content management system. Versions prior to 2.18.2 have a Remote Code Execution (RCE) issue that allows remote authentica… |
CVE-2026-86666 | High | 7.3 | 2026-09-08 | A security flaw has been discovered in aircheng-org iWebShop-5 up to 5.15. Impacted is the function upload_json/uploadFile of the file controllers/pic.php. The… |
CVE-2026-50093 | Critical | 9.0 | 2026-09-08 | A vulnerability has been identified in Siveillance Control Pro V3.0 (All versions < V3.0.12.2173), Siveillance Control Pro V4.0 (All versions < V4.0.9.2178), S… |
CVE-2026-86305 | High | 7.3 | 2026-09-07 | A security flaw has been discovered in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. Affected by this issue… |
CVE-2026-86272 | High | 7.3 | 2026-09-07 | A vulnerability was determined in Beijing Meite Software Technology U+Smart Enjoyment WebSite 18.6001.1096.1000. This impacts an unknown function of the file /… |
CVE-2026-86239 | Medium | 5.3 | 2026-09-07 | A vulnerability was identified in liufee FeehiCMS up to 2.1.1. The impacted element is the function UeditorAction::init of the file backend/widgets/ueditor/Ued… |
CVE-2026-50894 | Critical | 9.8 | 2026-09-04 | easyadmin v2.0.2.2 is vulnerable to Unrestricted Upload of File with Dangerous Type in the background management interface which allows authenticated remote at… |
CVE-2026-78839 | High | 8.1 | 2026-09-04 | An arbitrary file upload vulnerability in AppNitro MachForm v30 allows attackers to execute arbitrary code via uploading a crafted .phar file. |
CVE-2026-71620 | High | 8.1 | 2026-09-04 | File Upload vulnerability in Zhao-github ApiAdmin v.5.0.1 allows a remote attacker to execute arbitrary code via a crafted .php file |
CVE-2026-75169 | High | 8.8 | 2026-09-04 | An arbitrary file upload vulnerability in /cgi-bin/ugwupload.cgi of MBS-Solutions X-Serie Gateway firmware V6_00_05 allows a remote authenticated user with Adm… |
CVE-2026-44402 | Critical | 9.8 | 2026-09-04 | Voltronic Power SNMP Web Pro 1.1 contains an unauthenticated remote code execution vulnerability in the upload.cgi firmware update endpoint that allows remote… |
CVE-2026-12483 | High | 7.5 | 2026-09-04 | The LearnDash LMS plugin for WordPress is vulnerable to Unrestricted File Type Upload in versions up to and including 5.1.5. This is due to insufficient input… |
CVE-2026-85208 | High | 7.3 | 2026-09-03 | A security flaw has been discovered in itsourcecode Online Medicine Delivery System 1.0. The affected element is the function doInsert of the file /rider/order… |
CVE-2026-85186 | Medium | 6.3 | 2026-09-03 | A weakness has been identified in itsourcecode Online Medicine Delivery System 1.0. Affected by this vulnerability is the function doupdateimage of the file /c… |
CVE-2026-85135 | Medium | 6.3 | 2026-09-03 | A security flaw has been discovered in ILIAS up to 9.21/10.9/11.2. This affects the function ilObjMediaObjectGUI::uploadMultipleSubtitleFileObject of the file… |
CVE-2026-76174 | | 2026-09-03 | Unrestricted file upload vulnerability in the CSV file upload functionality of the Ocsreports admin_info endpoint. The application validates files solely based… | |
CVE-2026-82524 | High | 7.2 | 2026-09-02 | UnoPim before 2.1.5 contains an authenticated file upload vulnerability that allows authenticated administrators to upload arbitrary PHP files through the Tiny… |
CVE-2026-53649 | Critical | 9.6 | 2026-09-02 | Joro is a web exploitation framework. Prior to version 1.1.1, Joro's default proxy mode exposes a local API on 127.0.0.1:9090 that performs no authentication a… |
CVE-2026-4357 | Critical | 10.0 | 2026-09-02 | The Embed HTML5 Game WordPress plugin through 1.3 does not properly restrict who can upload files via the plugin, as well as what can be uploaded, making it po… |
CVE-2025-9314 | Critical | 9.8 | 2026-09-02 | The Developer Tools WordPress plugin through 1.1.3 contains an unauthenticated arbitrary file upload vulnerability in the bundled SWFUpload component |
CVE-2026-76782 | High | 7.3 | 2026-09-02 | Vulnerability in Drupal Screenshot. This issue affects Screenshot versions: *.*. |
CVE-2026-19219 | High | 8.1 | 2026-09-02 | In Progress® Telerik® UI for AJAX prior to v2026.3.812, insufficient integrity protection of dialog request parameters used by the RadEditor file browser may a… |
CVE-2026-84637 | Critical | 9.8 | 2026-09-01 | Malicious calendar invitations could use file URI attachments to launch local or network-hosted executables on Windows, bypassing Thunderbird's normal executab… |
CVE-2026-19513 | High | 8.1 | 2026-09-01 | The Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.0.2. This is due to insufficient validati… |
CVE-2026-84147 | | 2026-09-01 | This vulnerability exists in the ERP system due to improper authentication controls and inadequate file type validation at the API endpoint. An unauthenticated… | |
CVE-2026-75865 | Critical | 9.8 | 2026-09-01 | The WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode plugin for WordPress is vulnerable to arbitrary file upload d… |
CVE-2026-82921 | High | 7.3 | 2026-08-31 | A weakness has been identified in ShopEx ECShop up to 2.5.1. This affects the function check_img_type of the file admin/pack.php. Executing a manipulation of t… |
CVE-2026-81891 | High | 8.1 | 2026-08-31 | elFinder is an open-source file manager for web, written in JavaScript using jQuery UI. Prior to 2.1.70, checkExtractItems() in php/elFinderVolumeDriver.class… |
CVE-2026-81780 | Critical | 10.0 | 2026-08-31 | Unauthenticated Arbitrary File Upload in Hash Form <= 1.4.2 versions. |
CVE-2026-54179 | Medium | 4.4 | 2026-08-31 | backpack/crud provides Create, Read, Update & Delete (CRUD) functions for Backpack, a collection of Laravel packages that help users build custom administratio… |
CVE-2026-82970 | Critical | 10.0 | 2026-08-31 | Unrestricted Upload of File with Dangerous Type vulnerability in WP Legal Pages WP Cookie Notice for GDPR, CCPA & ePrivacy Consent allows Using Malicious Files… |
CVE-2026-78078 | | 2026-08-31 | Joomla Extension - joomshaper.com - Privileged File Upload Bypass via Content Spoofing in Helix Ultimate < 2.2.10 - Image uploads previously validated only fil… | |
CVE-2026-82679 | Medium | 6.3 | 2026-08-31 | A security flaw has been discovered in diem-project diem up to 5.1.3. The impacted element is an unknown function of the file dmFrontPlugin/lib/dmWidget/media/… |
CVE-2026-82629 | Medium | 4.7 | 2026-08-31 | A vulnerability was determined in jeecgboot jeewx-boot up to 641ab52c3e1845fec39996d7794c33fb40dad1dd. This issue affects the function MyJwWebJwid3Controller.d… |
CVE-2026-82607 | High | 7.3 | 2026-08-31 | A vulnerability was found in Cozmoslabs Profile Builder Plugin up to 3.16.1 on WordPress. The impacted element is the function wppb_ajax_simple_avatar of the f… |
CVE-2026-82450 | High | 8.8 | 2026-08-29 | BookStack before 26.05.4 contains a remote code execution vulnerability in the portable ZIP import functionality that allows users with Import Content and Crea… |
CVE-2026-14494 | Critical | 9.8 | 2026-08-29 | The Sigma Forms Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.4.5 via the handle_form_submission func… |
CVE-2026-79706 | Medium | 5.3 | 2026-08-28 | The Breeze Cache WordPress plugin before 2.5.13 does not sanitise a value taken from the request before using it to build the paths of the files it caches, all… |
CVE-2026-18983 | High | 7.5 | 2026-08-28 | The One User Avatar | User Profile Picture plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.5.4 via th… |
CVE-2026-81931 | | 2026-08-27 | Unrestricted Upload of File with Dangerous Type in the product photo upload in Roskus Prospero Flow CRM before 5.16.0 allows an authenticated user holding the… | |
CVE-2026-78274 | Critical | 9.1 | 2026-08-27 | Editor Arbitrary File Upload in Fluent Boards Pro <= 2.0.11 versions. |
CVE-2026-77991 | | 2026-08-27 | Joomla Extension - joomlaeventmanager.net - Privileged remote code execution in Joomla Event Manager < 5.0.1 - The administrator source model allows to write d… | |
CVE-2026-77018 | High | 8.8 | 2026-08-27 | The Workeera WordPress plugin before 1.0.6 does not restrict which profile values a candidate may submit, nor validate the type of the file it subsequently wr… |
CVE-2026-75331 | Medium | 4.6 | 2026-08-26 | tamguo 1.5.3 is vulnerable to Unrestricted File Upload Leading to Stored XSS. The /uploadFile and /imgUpload endpoints in FileUploadController.java and UEditor… |
CVE-2026-75327 | Critical | 9.8 | 2026-08-26 | In DocSys-master V2.02.85, the uploadMarkdownPic interface in src/com/DocSystem/controller/DocController.java has an arbitrary file upload vulnerability: |
CVE-2025-61165 | Critical | 9.8 | 2026-08-26 | An arbitrary file upload vulnerability in the /v1/my_drive/batch_upload component of cohere North AI v1.1.5 allows attackers to exeute arbitrary code via uploa… |
CVE-2026-18080 | Critical | 9.8 | 2026-08-26 | The ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce plugin for WordPress is vulnerable to Unrestricted File Type Upload in all versions up to, a… |
CVE-2026-80237 | High | 8.8 | 2026-08-26 | EFence developed by Thinking Software Technology has an Arbitrary File Upload vulnerability. Authenticated remote attackers can upload and execute web shell ba… |
CVE-2026-80235 | Critical | 9.8 | 2026-08-26 | EFence developed by Thinking Software Technology has an Arbitrary File Upload vulnerability. Unauthenticated remote attackers can upload and execute web shell… |
CVE-2026-80233 | High | 7.2 | 2026-08-26 | CAYIN CMS-WS, CMS-SE, and SMP series products developed by CAYIN Technology have an Arbitrary File Upload vulnerability. Privileged remote attackers can upload… |
CVE-2026-80050 | Medium | 6.5 | 2026-08-25 | ContiNew Admin fails to apply file-upload permission checks or file-type allowlist validation to multipart upload endpoints, allowing authenticated users to st… |
CVE-2026-55419 | Medium | 5.3 | 2026-08-25 | Reachy Mini is an SDK for controlling Reachy Mini robots. Prior to 1.8.2, the Reachy Mini daemon exposes the /api/media/sounds/upload endpoint implemented by t… |
CVE-2026-75496 | High | 7.2 | 2026-08-25 | Webkul QloApps does not perform proper validation on uploaded file extensions or MIME types before moving the file to a publicly accessible directory. A remote… |
CVE-2026-16286 | Critical | 9.8 | 2026-08-25 | Unrestricted upload of file with dangerous type vulnerability in TRtek Technological Products Computer Software Hardware Industry and Trade Limited Company Sof… |
CVE-2026-79670 | Medium | 4.8 | 2026-08-25 | Ech0 before 4.4.3 contains a stored cross-site scripting vulnerability in the file upload endpoint that validates Content-Type using only client-supplied heade… |
CVE-2026-16601 | High | 8.8 | 2026-08-25 | The CM Map Locations – Visualize and share your locations in a few clicks plugin for WordPress is vulnerable to Limited Arbitrary File Upload in all versions u… |
CVE-2026-56702 | High | 8.8 | 2026-08-25 | Adminer versions before 5.4.3 contain an unrestricted file upload vulnerability in the AdminerFileUpload plugin that allows authenticated users to upload PHP f… |
CVE-2026-32559 | Critical | 9.9 | 2026-08-24 | Subscriber Arbitrary File Upload in UltimateAI <= 3.1.0 versions. |
CVE-2026-78337 | | 2026-08-24 | Unrestricted Upload of File with Dangerous Type in the company logo upload in Roskus Prospero Flow CRM before 5.15.13 allows an authenticated user holding the… | |
CVE-2026-78245 | High | 7.3 | 2026-08-24 | A flaw has been found in itsourcecode Online Pharmacy System 1.0. This affects the function move_uploaded_file of the file all_users/register.php of the compon… |
CVE-2026-78202 | High | 7.3 | 2026-08-24 | A vulnerability was found in itsourcecode Payroll System 1.0. This affects the function save_settings of the file admin_class.php. The manipulation of the argu… |
CVE-2026-19852 | Medium | 6.1 | 2026-08-24 | NewSiteServer (NSS) developed by CyberTutor has an Arbitrary File Upload vulnerability. Unauthenticated remote attackers can upload arbitrary files, including… |
CVE-2026-49849 | Critical | 9.1 | 2026-08-21 | xShop is an open-source shop developed in Laravel. An Unrestricted File Upload vulnerability in xShop version 3.0.3 allows an authenticated administrator to up… |
CVE-2026-77681 | Medium | 6.3 | 2026-08-21 | A vulnerability was identified in CodeAstro Online Job Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /users/update-profile… |
CVE-2026-2334 | | 2026-08-20 | An issue was discovered in vsDesk v14.0101. An authenticated attacker with administrative privileges can bypass client-side file validation in the "Import via… | |
CVE-2026-76995 | Medium | 4.7 | 2026-08-20 | A vulnerability was identified in SourceCodester Simple Online Food Ordering System 1.0. This issue affects some unknown processing of the file /admin/ajax.php… |
CVE-2026-64960 | | 2026-08-20 | ATutor Gameme module allows users to upload files of any type and extension without restriction. Due to improper handling of file uploads, files are stored in… | |
CVE-2026-74018 | Critical | 9.9 | 2026-08-20 | Subscriber Arbitrary File Upload in Warehouse Cargo <= 2.6.9 versions. |
CVE-2026-74016 | Critical | 9.9 | 2026-08-20 | Subscriber Arbitrary File Upload in Smart Cleaning <= 4.8.6 versions. |
CVE-2026-74014 | Critical | 9.9 | 2026-08-20 | Subscriber Arbitrary File Upload in IT Residence <= 3.2.1 versions. |
CVE-2026-66600 | Critical | 9.1 | 2026-08-20 | Author Arbitrary File Upload in Media LIbrary Assistant <= 3.39 versions. |
CVE-2026-14946 | High | 7.2 | 2026-08-20 | A high privileged remote attacker can upload a .php file and then request it directly from /uploads/<filename>.php to achieve arbitrary code execution due to i… |
CVE-2026-15049 | High | 7.2 | 2026-08-20 | The Depicter — Popup & Slider Builder WordPress plugin before 4.8.0 does not validate the type of a file uploaded through its import feature and does not remov… |
CVE-2026-76800 | Medium | 6.3 | 2026-08-20 | A flaw has been found in DeDeCMS 3. Affected by this vulnerability is an unknown functionality of the file /include/dialog/select_media_post.php. Executing a m… |
CVE-2026-68899 | High | 8.7 | 2026-08-19 | Wekan is open source kanban built with Meteor. Prior to 9.90, isFileValid() in models/fileValidation.js used the Unix file command for content-based MIME detec… |
CVE-2026-32475 | Critical | 9.0 | 2026-08-19 | Unrestricted Upload of File with Dangerous Type vulnerability in Elementor Elementor Pro allows Using Malicious Files. This issue affects Elementor Pro: from… |
CVE-2026-75949 | | 2026-08-19 | Joomla Extension - cmsjunkie.com - Arbitrary file upload / deletion (path traversal) in J-BusinessDirectory < 6.2.3 - Upload/remove accepted a client-controll… | |
CVE-2026-74803 | | 2026-08-19 | Joomla Extension - yootheme.com - Unauthenticated arbitrary file upload in Zoo < 4.1.64 - The image element accepts arbitrary files when the client-supplied Co… | |
CVE-2026-73373 | Critical | 9.8 | 2026-08-18 | Joomla! Core - [20260810] - Unrestricted uploads of SHTML files in Joomla 1.0.0-5.4.7, 6.0.0-6.1.2 - The default list of dangerous files did not include SHTML… |
CVE-2026-73996 | Critical | 9.8 | 2026-08-18 | Unauthenticated Arbitrary File Upload in Masteriyo - LMS <= 2.3.2 versions. |
CVE-2026-66627 | Critical | 9.9 | 2026-08-18 | Unrestricted Upload of File with Dangerous Type vulnerability in EDGE22 Studios Ltd. GP Premium allows Remote Code Inclusion. This issue affects GP Premium: f… |
CVE-2026-32474 | Critical | 9.9 | 2026-08-18 | Contributor Arbitrary File Upload in Templatiq <= 0.2.5 versions. |
CVE-2026-32463 | Critical | 9.9 | 2026-08-18 | Contributor Arbitrary File Upload in Sync Post With Other Site <= 1.9.3 versions. |
CVE-2026-28192 | Critical | 9.6 | 2026-08-18 | Unauthenticated Arbitrary File Upload in Piotnet Addons For Elementor Pro <= 7.1.67 versions. |
CVE-2024-14046 | Medium | 6.3 | 2026-08-18 | A security vulnerability has been detected in OpenBoxes up to 0.9.1. This issue affects the function DocumentController of the file grails-app/controllers/org/… |