VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

CWE-434Vulnerability type

WordPress Arbitrary File Upload vulnerabilities (page 15)

Upload handlers that accept PHP files, the shortest route from a plugin bug to a webshell.

Severity
Signals
Software

41,172 results

WordPress Arbitrary File Upload vulnerabilities (page 15)
SeverityVulnerabilityCVEInstallsPublished
Medium5.4Unauthenticated Stored Cross-Site Scripting via Comment Content via Bundled Simple HTML DOM Noise Restoration
Smart Cookie Kit≤2.3.2No patch available
CVE-2026-119178—
High8.1Unauthenticated Arbitrary File Upload via 'modelApi' Parameter
Live2DWebCanvas≤2.2.1No patch available
CVE-2026-92895—
High7.6Authenticated (Subscriber+) Privilege Escalation to 'check-token' AJAX Action
Pubjet | پاب‌جت≤5.4.8No patch available
CVE-2026-103479—
Critical9.8Unauthenticated Privilege Escalation to Form-Type Confusion via 'bf_post_type' Parameter
BuddyForms≤2.10.5Update to 2.10.6
CVE-2026-107622—
Medium6.4Authenticated (Subscriber+) Stored DOM-Based Cross-Site Scripting via 'track' Post Meta 'label' Field
All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos≤5.0.0Update to 5.1.0
CVE-2026-116545—
Medium5.4Unauthenticated Stored Cross-Site Scripting via 'bf_post_type' Parameter via Post-Type Confusion
BuddyForms≤2.10.5Update to 2.10.6
CVE-2026-107658—
High8.8Authenticated (Subscriber+) Privilege Escalation via Account Change-Password Form
Advanced Members for ACF≤1.3.0Update to 1.3.1
CVE-2026-116624—
Medium4.9Authenticated (Subscriber+) Stored Cross-Site Scripting via 'option_page' Parameter via 'all' Hook
AAA Autoload Optimizer≤1.7.0Update to 1.7.1
CVE-2026-119211—
Medium5.4Authenticated (Subscriber+) Arbitrary Shortcode Execution via Author Biographical Info
AMP for WP – Accelerated Mobile Pages≤1.1.18Update to 1.1.19
CVE-2026-103908—
Medium4.9Authenticated (Administrator+) SQL Injection via 'params[searchKey]' Parameter
YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports≤2.7.8Update to 2.7.9
CVE-2026-109977—
Medium6.4Authenticated (Subscriber+) Stored Cross-Site Scripting via 'display_name' User Meta
WP User Manager – Registration Form, Login Form, User Profile Builder & Member Directory≤2.10.2Update to 2.10.3
CVE-2026-120550—
Medium5.3Missing Authorization to Unauthenticated Arbitrary Post Meta Modification and Arbitrary File Copy via 'wpcf7-redirect' Parameter
Redirection for Contact Form 7≤3.2.14Update to 3.2.15
CVE-2026-120659—
High7.2Unauthenticated Stored Cross-Site Scripting via 'vars' Parameter
MDTF – Meta Data and Taxonomies Filter≤1.4.1Update to 1.4.2
CVE-2026-110776—
Medium6.5Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via 'id' Parameter
Eventin – Events Calendar, Tickets, Registration, Booking & WooCommerce≤4.1.29Update to 4.1.30
CVE-2026-109994—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via 'theme' Block Attribute
Parsi Date | بسته فارسی ساز وردپرس و ووکامرس پارسی دیت≤6.4Update to 6.5
CVE-2026-97642—
Medium4.3Missing Authorization to Authenticated (Subscriber+) Unauthorized Video Importation via vodimportvideo AJAX Action
VOD Infomaniak≤1.5.15Update to 1.5.16
CVE-2026-115831—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via 'badge' Shortcode Attribute
UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP≤1.2.80Update to 1.2.81
CVE-2026-120671—
Medium6.5Missing Authorization to Authenticated (Contributor+) Payment Gateway Credential Disclosure via edit_form_top Handler on Tour/Hotel Edit Screen
Travelly – Tour & Travel Booking Manager for WooCommerce≤2.3.11Update to 2.3.12
CVE-2026-121794—
Medium6.4Authenticated (Author+) Stored Cross-Site Scripting via Post Slug
Permalink Manager Lite≤2.6.1Update to 2.6.2
CVE-2026-122222—
High7.2Unauthenticated Stored Cross-Site Scripting via Tree Chart Widget Settings
Graphina – Charts and Graphs For Elementor≤3.1.13Update to 3.1.14
CVE-2026-110291—
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via 'date_format' Shortcode Attribute
Posts Table with Search & Sort≤1.4.14Update to 1.4.15
CVE-2026-118189—
Medium4.3Missing Authorization
Directorist: AI-Powered Business Directory, Listings & Classified Ads≤8.10Update to 8.11
CVE-2026-118529—
Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting
Secure Custom Fields≤6.9.7Update to 6.9.8
CVE-2026-97195—
Medium5.3Unauthenticated Information Exposure
Content Egg – Affiliate Product Importer & Price Comparison≤12.0.0No patch available
CVE-2026-119751—
Medium5.3Missing Authorization
Pie Register – User Registration, Profiles & Content Restriction≤3.8.4.15Update to 3.8.4.16
CVE-2026-96961—
Medium4.3Authenticated (Contributor+) Information Exposure
Secure Custom Fields≤6.9.7Update to 6.9.8
CVE-2026-97194—
Medium4.3Authenticated (Contributor+) Insecure Direct Object Reference
Secure Custom Fields≤6.9.7Update to 6.9.8
CVE-2026-97193—
Medium4.3Missing Authorization
Secure Custom Fields≤6.9.7Update to 6.9.8
CVE-2026-97192—
Medium4.3Missing Authorization
Pie Register – User Registration, Profiles & Content Restriction≤3.8.4.15Update to 3.8.4.16
CVE-2026-96963—
High7.2Authenticated (Shop Manager+) PHP Code Injection via eval() via 'feedConfigCustom2' Parameter
Product Feed Manager for WooCommerce – CTX Feed – Support 220+ Shopping, AI & Social Channels≤8.0.26Update to 8.0.27
CVE-2026-87964—

Search VulnCrest Radar

Jump to

Are you sure?