Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Critical9.810Web Booster <= 2.34.10 - Unauthenticated Arbitrary File Upload via 'page_id' ParameterOct 15, 2026
- Medium6.5FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.Oct 14, 2026
- High8.8The FV Flowplayer Video Player plugin for WordPress is vulnerable to Limited Arbitrary File Upload in all versions up to, and including, 7.5.54.7212 via the check_mime…Oct 14, 2026
- Critical9.8The JTL-Connector for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.4.3 via the saveImage() function.EPSS 0.8%Oct 14, 2026
- Critical9.8The Snazzy Social Media Feed plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.5 via the (file scope) function.EPSS 1.0%Oct 13, 2026
- Critical9.8The Printcart Store (PCDesigner / NB Designer) plugin for WooCommerce is vulnerable to unauthenticated arbitrary file upload leading to remote code execution in all ve…EPSS 0.9%Oct 13, 2026
- Critical10.0ColdFusion is affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution in the context of the current user.EPSS 0.6%Oct 13, 2026
- High8.6Payload is a free and open source headless content management system.EPSS 0.3%Oct 6, 2026
- High8.7Payload is a free and open source headless content management system.EPSS 0.2%Oct 6, 2026
- Critical9.8HCL BigFix Service Management is affected by an Unrestricted File Upload vulnerability due to improper file validation controls, which could allow an unauthenticated a…EPSS 0.3%Sep 18, 2026
- Critical10.0Balbooa Forms Unrestricted Upload of File with Dangerous Type VulnerabilityKEVEPSS 14.9%Jul 9, 2026
- Critical10.0Joomlack Page Builder Improper Access Control VulnerabilityKEVEPSS 30.9%Jun 29, 2026
- Critical10.0iCagenda Unrestricted Upload of File with Dangerous Type VulnerabilityKEVEPSS 20.1%Jun 20, 2026
- Critical10.0JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type VulnerabilityKEVEPSS 88.5%Jun 20, 2026
- Critical9.9Unrestricted Upload of File with Dangerous Type vulnerability in Themify Themify Sidepane WordPress Theme, Themify Themify Newsy, Themify Themify Folo, Themify Themify…EPSS 0.5%Jan 6, 2026
- Critical10.0SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type VulnerabilityKEVEPSS 85.7%Dec 28, 2025
- Critical9.8An arbitrary file rename vulnerability in the /admin/manager.php component of EasyImages 2.0 v2.8.6 and below allows attackers to execute arbitrary code via renaming a…EPSS 0.5%Dec 11, 2025
- High8.8An arbitrary file upload vulnerability in the /admin/manager.php component of EasyImages 2.0 v2.8.6 and below allows attackers to execute arbitrary code via uploading…EPSS 0.5%Dec 11, 2025
- High8.8The Video Merchant plugin for WordPress is vulnerable to Cross-Site Request Forgery in version <= 5.0.4.EPSS 0.4%Dec 10, 2025
- Critical9.8PipesHub is a fully extensible workplace AI platform for enterprise search and workflow automation.EPSS 1.8%Dec 10, 2025
- High8.8LeptonCMS version 7.3.0 contains an arbitrary file upload vulnerability, which is caused by the lack of proper validation for uploaded files.EPSS 0.8%Dec 9, 2025
- Low2.1A flaw has been found in Verysync 微力同步 up to 2.21.3.EPSS 0.4%Dec 7, 2025
- Critical9.8SAP NetWeaver Unrestricted File Upload VulnerabilityKEVEPSS 99.5%Apr 24, 2025
- High7.2Kentico Xperience Path Traversal VulnerabilityKEVEPSS 4.0%Mar 24, 2025
- High8.8Advantive VeraCore Unrestricted File Upload VulnerabilityKEVEPSS 32.3%Feb 3, 2025
45 records · page 1 of 2
PreviousNext