VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

CWE-434Vulnerability type

WordPress Arbitrary File Upload vulnerabilities (page 112)

Upload handlers that accept PHP files, the shortest route from a plugin bug to a webshell.

Severity
Signals
Software

41,182 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Arbitrary File Upload vulnerabilities (page 112)
SeverityVulnerabilityCVEInstallsPublished
Medium4.3Missing Authorization
MarketKing — Ultimate WooCommerce Multivendor Marketplace Solution≤2.1.71Update to 2.1.72
CVE-2026-93342—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
WPeMatico RSS Feed Fetcher≤2.8.25Update to 2.8.26
CVE-2026-89005—
Medium5.3Missing Authorization to Account Registration
MasterStudy LMS WordPress Plugin – for Online Courses and Education≤3.7.49Update to 3.7.50
CVE-2026-88846—
Medium4.3Unauthenticated (Subscriber+) Unauthorized Course Enrollment
MasterStudy LMS WordPress Plugin – for Online Courses and Education≤3.7.49Update to 3.7.50
CVE-2026-88848—
Medium4.3Missing Authorization
MasterStudy LMS WordPress Plugin – for Online Courses and Education≤3.7.49Update to 3.7.50
CVE-2026-88845—
Medium4.3Authenticated (Subscriber+) Information Exposure
Masteriyo LMS – LMS Course Builder, Quizzes & Certificates≤3.4.1Update to 3.4.2
CVE-2026-82850—
High7.5Authenticated (Subscriber+) PHP Object Injection
wpForo Forum≤3.1.5Update to 3.1.6
CVE-2026-80513—
Medium4.3Missing Authorization
MarketKing — Ultimate WooCommerce Multivendor Marketplace Solution≤2.1.71Update to 2.1.72
CVE-2026-93343—
High8.1Unauthenticated PHP Object Injection
Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder≤3.15.3Update to 3.15.4
CVE-2026-91827—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
Text Styler≤1.1.1No patch available
CVE-2026-88788—
Medium5.3Missing Authorization
WP User Manager – Registration Form, Login Form, User Profile Builder & Member Directory≤2.9.19Update to 2.9.20
CVE-2026-94079—
Medium4.3Missing Authorization
MarketKing — Ultimate WooCommerce Multivendor Marketplace Solution≤2.1.71Update to 2.1.72
CVE-2026-93344—
Medium4.3Missing Authorization to Authenticated (Subscriber+) Refund Requests
MarketKing — Ultimate WooCommerce Multivendor Marketplace Solution≤2.1.71Update to 2.1.72
CVE-2026-93341—
High7.2Unauthenticated Stored Cross-Site Scripting
Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder≤3.15.3Update to 3.15.4
CVE-2026-92438—
Medium4.3Authenticated (Contributor+) Insecure Direct Object Reference
WPeMatico RSS Feed Fetcher≤2.8.25Update to 2.8.26
CVE-2026-89004—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
WPeMatico RSS Feed Fetcher≤2.8.25Update to 2.8.26
CVE-2026-89002—
Medium4.3Missing Authorization
MasterStudy LMS WordPress Plugin – for Online Courses and Education≤3.7.49Update to 3.7.50
CVE-2026-88847—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid≤7.9.4Update to 7.9.5
CVE-2026-84151—
Medium4.3Authenticated (Subscriber+) Insecure Direct Object Reference
Masteriyo LMS – LMS Course Builder, Quizzes & Certificates≤3.4.1Update to 3.4.2
CVE-2026-82849—
Medium5.33.1.5 - Unauthenticated AI Credit Exhaustion
wpForo Forum3.0.0 – 3.1.5Update to 3.1.6
CVE-2026-80514—
Medium4.3Missing Authorization
CMB2≤2.12.0Update to 2.13.0
CVE-2026-80338—
Medium4.9Authenticated (Shop Manager+) Path Traversal to File Deletion via 'provider' Parameter
Product Feed Manager for WooCommerce – CTX Feed – Support 220+ Shopping, AI & Social Channels≤6.6.43Update to 6.6.44
CVE-2026-15095—
High7.5Authenticated (Contributor+) Local File Inclusion via 'template' Shortcode Attribute
WP Travel Engine – Tour Booking Plugin – Tour Operator Software≤6.8.0Update to 6.8.1
CVE-2026-9231—
Medium5.3Missing Authorization to Unauthenticated Arbitrary API Key Deletion via 'clear_api_type' Parameter
PixelPlay≤1.0.2No patch available
CVE-2025-14486—
Medium5.3Missing Authorization to Unauthenticated Arbitrary API Key Modification via 'pixabay_api' Parameter
Image Buzz≤1.0.3No patch available
CVE-2025-14484—
High8.8Authenticated (Subscriber+) Arbitrary File Deletion
BM Content Builder<3.17.1Update to 3.17.1
CVE-2025-1281—
Medium5.3Missing Authorization to Unauthenticated Arbitrary Stripe Payment Settings Modification via 'stripe_publishbale_key' Parameter
Handily≤1.0.3Update to 1.0.4
CVE-2025-14487—
Medium6.5Authenticated (Subscriber+) Arbitrary File Read
BM Content Builder<3.17.1Update to 3.17.1
CVE-2025-1280—
Medium4.3Authenticated (Contributor+) Exposure of Sensitive Information via 'contact_id' Parameter
WP-CRM System – Manage Clients and Projects≤3.4.6Update to 3.4.7
CVE-2026-9004—
Medium4.3Missing Authorization to Authenticated (Subscriber+) Plugin Deactivation
ThumbPress – Compress Images, Manage Thumbnails, Detect Image Issues, WebP/AVIF, Lazy Loading, Hotlinking & More≤6.2.1Update to 6.2.2
CVE-2026-7622—

Search VulnCrest Radar

Jump to

Are you sure?