共收录 549 条相关情报。
← 返回所有主题CVE-2026-83526
The FV Player 8 plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 8.1.7
CVE-2026-104752
The Rank Math SEO WordPress plugin before 1.0.280 does not correctly validate the type of a file uploaded through its s
CVE-2026-103889
The 3D Product configurator for WooCommerce plugin for WordPress is vulnerable to Remote Code Execution in all versions
CVE-2026-94589
The Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) plugin for WordPress is vulnerable
CVE-2026-108113
ILIAS before 9.24, 10.12, and 11.5 contains an unrestricted file upload vulnerability in QTI question import image handl
CVE-2026-108113
ILIAS before 9.24, 10.12, and 11.5 contains an unrestricted file upload vulnerability in QTI question import image handl
CVE-2026-108101
HortusFox (hortusfox-web) through 6.3 contains an unrestricted file upload vulnerability in PlantAttachmentModel that al
CVE-2026-108113
ILIAS before 9.24, 10.12, and 11.5 contains an unrestricted file upload vulnerability in QTI question import image handl
CVE-2026-94503
Unrestricted Upload of File with Dangerous Type vulnerability in PX-lab Zombify zombify allows Upload a Web Shell to a W
CVE-2025-15700
The AWP Classifieds WordPress plugin before 4.4.9 does not validate the type of files extracted from an uploaded ZIP arc
CVE-2026-17609
The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Arbitrary Directory Deletion in all ver
CVE-2026-17196
The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Unrestricted File Type Upload in all ve
CVE-2026-105644
### Impact SVG images included in content imports were stored without sanitization. An attacker who convinced an Admini
CVE-2026-105649
### Impact SVG media thumbnails, and SVG images uploaded with a non-SVG file extension, were stored without sanitizatio
CVE-2026-105868
Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions befo
CVE-2026-105862
Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions befo
CVE-2026-104069
HortusFox before 6.2 contains a remote code execution vulnerability in ThemeModule::startImport() where an uploaded ZIP
CVE-2026-39770
Unauthenticated Arbitrary File Upload in Doctreat <= 1.7.0 versions.
CVE-2026-39759
Employer / Sales Representative Arbitrary File Upload in Workreap Core <= 3.4.5 versions.
CVE-2026-39757
Subscriber Arbitrary File Upload in Taskbot <= 6.6 versions.