# Unrestricted file upload.

Uploads of dangerous file types, often leading to code execution. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [WP Import Export Lite < 3.9.33 - Authenticated Arbitrary File Upload via Remote Image Import](https://agentprime.io/advisories/CVE-2026-76552.md)
  `CVE-2026-76552` · CVE record: Unknown WP Import Export Lite · CVSS 8.8 High · Not analysed yet · Published 16 Sept 2026 · Tags: Unrestricted file upload
- [Contest Gallery <= 32.0.1 - Unauthenticated Arbitrary File Upload via 'baseUrlForFacebook' Parameter](https://agentprime.io/advisories/CVE-2026-78088.md)
  `CVE-2026-78088` · CVE record: contest-gallery Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe · CVSS 8.8 High · Not analysed yet · Published 16 Sept 2026 · Tags: Unrestricted file upload
- [synaptikcms synaptik-cms Admin File Manager file-manager.php rename unrestricted upload](https://agentprime.io/advisories/CVE-2026-92247.md)
  `CVE-2026-92247` · CVE record: synaptikcms synaptik-cms · CVSS 5.1 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Broken access control, Unrestricted file upload
- [Unrestricted file upload in Dell Wyse Management Suite](https://agentprime.io/advisories/CVE-2026-81240.md)
  `CVE-2026-81240` · CVE record: Dell Wyse Management Suite · CVSS 8.6 High · Not analysed yet · Published 15 Sept 2026 · Tags: Unrestricted file upload
- [Unrestricted file upload in Dell Wyse Management Suite](https://agentprime.io/advisories/CVE-2026-81239.md)
  `CVE-2026-81239` · CVE record: Dell Wyse Management Suite · CVSS 8.6 High · Not analysed yet · Published 15 Sept 2026 · Tags: Unrestricted file upload
- [Unrestricted file upload in Dell Wyse Management Suite](https://agentprime.io/advisories/CVE-2026-81236.md)
  `CVE-2026-81236` · CVE record: Dell Wyse Management Suite · CVSS 8.6 High · Not analysed yet · Published 15 Sept 2026 · Tags: Unrestricted file upload
- [WuzhiCMS Avatar Upload index.php setAvatar unrestricted upload](https://agentprime.io/advisories/CVE-2026-91849.md)
  `CVE-2026-91849` · CVE record: WuzhiCMS · CVSS 5.3 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Broken access control, Unrestricted file upload
- [SourceCodester Online Faculty Clearance System Profile Picture Upload edit_picture.php move_uploaded_file unrestricted upload](https://agentprime.io/advisories/CVE-2026-91005.md)
  `CVE-2026-91005` · CVE record: SourceCodester Online Faculty Clearance System · CVSS 5.3 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Broken access control, Unrestricted file upload
- [SourceCodester College Notes Gallery Management System Profile Upload userprofile.php unrestricted upload](https://agentprime.io/advisories/CVE-2026-90857.md)
  `CVE-2026-90857` · CVE record: SourceCodester College Notes Gallery Management System · CVSS 5.3 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Broken access control, Unrestricted file upload
- [DotVVM: Unrestricted file upload](https://agentprime.io/advisories/CVE-2026-57581.md)
  `CVE-2026-57581` · CVE record: riganti dotvvm · CVSS 5.3 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: Unrestricted file upload
- [Unrestricted file upload in Contec Co., Ltd. CAN-2-WF and others](https://agentprime.io/advisories/CVE-2026-82793.md)
  `CVE-2026-82793` · CVE record: Contec Co., Ltd. CAN-2-WF and 1 more · CVSS 8.6 High · Not analysed yet · Published 14 Sept 2026 · Tags: Unrestricted file upload
- [Unrestricted file upload in Contec Co., Ltd CPS-TM341G5MB-ADSC1-931 and others](https://agentprime.io/advisories/CVE-2026-82780.md)
  `CVE-2026-82780` · CVE record: Contec Co., Ltd CPS-TM341G5MB-ADSC1-931 and 2 more · CVSS 8.7 High · Not analysed yet · Published 14 Sept 2026 · Tags: Unrestricted file upload
- [Unrestricted file upload in digitaldruid HotelDruid](https://agentprime.io/advisories/CVE-2023-34854.md)
  `CVE-2023-34854` · CVE record: digitaldruid HotelDruid · CVSS 6.6 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: Unrestricted file upload
- [Anil-matcha Open-Generative-AI S3 Upload upload-binary unrestricted upload](https://agentprime.io/advisories/CVE-2026-90603.md)
  `CVE-2026-90603` · CVE record: Anil-matcha Open-Generative-AI · CVSS 6.9 Medium · Not analysed yet · Published 13 Sept 2026 · Tags: Broken access control, Unrestricted file upload
- [PHPGurukul Bank Locker Management System add-locker-form.php unrestricted upload](https://agentprime.io/advisories/CVE-2026-90519.md)
  `CVE-2026-90519` · CVE record: PHPGurukul Bank Locker Management System · CVSS 5.3 Medium · Not analysed yet · Published 13 Sept 2026 · Tags: Broken access control, Unrestricted file upload
- [lenve vhr Avatar Upload userface FastDFSUtils.upload unrestricted upload](https://agentprime.io/advisories/CVE-2026-90500.md)
  `CVE-2026-90500` · CVE record: lenve vhr · CVSS 5.3 Medium · Not analysed yet · Published 13 Sept 2026 · Tags: Broken access control, Unrestricted file upload
- [WP Images Upload on Piclect <= 1.0 - Unauthenticated Arbitrary File Upload](https://agentprime.io/advisories/CVE-2026-84171.md)
  `CVE-2026-84171` · CVE record: Unknown WP images upload on piclect · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Sept 2026 · Tags: Unrestricted file upload
- [DS Ad Rotator <= 0.8 - Unauthenticated Arbitrary File Upload](https://agentprime.io/advisories/CVE-2026-81402.md)
  `CVE-2026-81402` · CVE record: Unknown DS Ad Rotator · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Sept 2026 · Tags: Unrestricted file upload
- [Gpx2Graphics <= 0.3 - Arbitrary File Upload via CSRF](https://agentprime.io/advisories/CVE-2026-81090.md)
  `CVE-2026-81090` · CVE record: Unknown Gpx2Graphics · CVSS 7.2 High · Not analysed yet · Published 12 Sept 2026 · Tags: Cross-site request forgery (CSRF), Unrestricted file upload
- [MIPL Grouped Checkout Fields for WooCommerce <= 1.2.2 - Unauthenticated Arbitrary File Upload](https://agentprime.io/advisories/CVE-2026-8778.md)
  `CVE-2026-8778` · CVE record: mulika MIPL Grouped Checkout Fields for WooCommerce. Customize & Organize Checkout Fields. · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026 · Tags: Unrestricted file upload
- [OTP Login & Register Woocommerce <= 2.7.2 - Unauthenticated Authentication Bypass via Brute Force](https://agentprime.io/advisories/CVE-2026-12215.md)
  `CVE-2026-12215` · CVE record: xootix OTP Login & Register Woocommerce · CVSS 5.3 Medium · Not analysed yet · Published 11 Sept 2026 · Tags: Unrestricted file upload
- [Unrestricted file upload in D-ZERO CO.,LTD. BurgerEditor](https://agentprime.io/advisories/CVE-2026-84063.md)
  `CVE-2026-84063` · CVE record: D-ZERO CO.,LTD. BurgerEditor · CVSS 8.5 High · Not analysed yet · Published 10 Sept 2026 · Tags: Unrestricted file upload
- [Drag and Drop File Upload for Elementor Forms <= 1.6.0 - Unauthenticated Arbitrary File Upload via 'type' Parameter](https://agentprime.io/advisories/CVE-2026-18351.md)
  `CVE-2026-18351` · CVE record: addonsorg Drag and Drop File Upload for Elementor Forms · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Sept 2026 · Tags: Unrestricted file upload
- [MaxSite CMS 0.94 through 109.6 HTML Upload XSS via admin_page](https://agentprime.io/advisories/CVE-2026-87928.md)
  `CVE-2026-87928` · CVE record: MaxSite MaxSite CMS · CVSS 5.1 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Unrestricted file upload
- [Rara One Click Demo Import < 1.3.5 Arbitrary File Upload RCE](https://agentprime.io/advisories/CVE-2026-26212.md)
  `CVE-2026-26212` · CVE record: Rara Themes Rara One Click Demo Import · CVSS 8.6 High · Not analysed yet · Published 9 Sept 2026 · Tags: Unrestricted file upload
- [An arbitrary file upload and path traversal vulnerability exists in LZ-litchi 1.0.0.](https://agentprime.io/advisories/CVE-2026-71805.md)
  `CVE-2026-71805` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Sept 2026 · Tags: Unrestricted file upload
- [InstantCMS has Remote Code Execution in package installer](https://agentprime.io/advisories/CVE-2026-54611.md)
  `CVE-2026-54611` · CVE record: instantsoft icms2 · CVSS 5.5 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Code injection, Unrestricted file upload
- [aircheng-org iWebShop-5 pic.php uploadFile unrestricted upload](https://agentprime.io/advisories/CVE-2026-86666.md)
  `CVE-2026-86666` · CVE record: aircheng-org iWebShop-5 · CVSS 6.9 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Broken access control, Unrestricted file upload
- [Unrestricted file upload in Siemens Siveillance Control Pro V3.0 and others](https://agentprime.io/advisories/CVE-2026-50093.md)
  `CVE-2026-50093` · CVE record: Siemens Siveillance Control Pro V3.0 and 3 more · CVSS 8.9 High · Not analysed yet · Published 8 Sept 2026 · Tags: Unrestricted file upload
- [light0011 cms Upload.class.php upload unrestricted upload](https://agentprime.io/advisories/CVE-2026-86305.md)
  `CVE-2026-86305` · CVE record: light0011 cms · CVSS 6.9 Medium · Not analysed yet · Published 7 Sept 2026 · Tags: Broken access control, Unrestricted file upload
- [Beijing Meite Software Technology U+Smart Enjoyment WebSite UploadFormImg.ashx unrestricted upload](https://agentprime.io/advisories/CVE-2026-86272.md)
  `CVE-2026-86272` · CVE record: Beijing Meite Software Technology U+Smart Enjoyment WebSite · CVSS 6.9 Medium · Not analysed yet · Published 7 Sept 2026 · Tags: Broken access control, Unrestricted file upload
- [liufee FeehiCMS UEditor Widget UeditorAction.php init unrestricted upload](https://agentprime.io/advisories/CVE-2026-86239.md)
  `CVE-2026-86239` · CVE record: liufee FeehiCMS · CVSS 6.9 Medium · Not analysed yet · Published 7 Sept 2026 · Tags: Broken access control, Unrestricted file upload
- [Voltronic Power SNMP Web Pro 1.1 Unauthenticated RCE via upload.cgi](https://agentprime.io/advisories/CVE-2026-44402.md)
  `CVE-2026-44402` · CVE record: Voltronic Power SNMP Web Pro · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Sept 2026 · Tags: Unrestricted file upload
- [LearnDash LMS <= 5.1.5 - Authenticated (Subscriber+) Arbitrary File Upload via Assignment Upload Handler](https://agentprime.io/advisories/CVE-2026-12483.md)
  `CVE-2026-12483` · CVE record: StellarWP LearnDash LMS · CVSS 7.5 High · Not analysed yet · Published 4 Sept 2026 · Tags: Unrestricted file upload
- [An arbitrary file upload vulnerability in AppNitro MachForm v30 allows attackers to execute arbitrary code via uploading a crafted .phar file.](https://agentprime.io/advisories/CVE-2026-78839.md)
  `CVE-2026-78839` · CVE record · CVSS 8.1 High · Not analysed yet · Published 4 Sept 2026 · Tags: Unrestricted file upload
- [An arbitrary file upload vulnerability in /cgi-bin/ugwupload.cgi of MBS-Solutions X-Serie Gateway firmware V6_00_05 allows a remote authenticated user with Admin role to upload files with arbitrary c…](https://agentprime.io/advisories/CVE-2026-75169.md)
  `CVE-2026-75169` · CVE record · CVSS 8.8 High · Not analysed yet · Published 4 Sept 2026 · Tags: Unrestricted file upload
- [File Upload vulnerability in Zhao-github ApiAdmin v.5.0.1 allows a remote attacker to execute arbitrary code via a crafted .php file](https://agentprime.io/advisories/CVE-2026-71620.md)
  `CVE-2026-71620` · CVE record · CVSS 8.1 High · Not analysed yet · Published 4 Sept 2026 · Tags: Unrestricted file upload
- [easyadmin v2.0.2.2 is vulnerable to Unrestricted Upload of File with Dangerous Type in the background management interface which allows authenticated remote attackers to execute arbitrary code and ga…](https://agentprime.io/advisories/CVE-2026-50894.md)
  `CVE-2026-50894` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Sept 2026 · Tags: Unrestricted file upload
- [itsourcecode Online Medicine Delivery System Order Management Controller controller.php doInsert unrestricted upload](https://agentprime.io/advisories/CVE-2026-85208.md)
  `CVE-2026-85208` · CVE record: itsourcecode Online Medicine Delivery System · CVSS 6.9 Medium · Not analysed yet · Published 3 Sept 2026 · Tags: Broken access control, Unrestricted file upload
- [itsourcecode Online Medicine Delivery System Customer Controller controller.php doupdateimage unrestricted upload](https://agentprime.io/advisories/CVE-2026-85186.md)
  `CVE-2026-85186` · CVE record: itsourcecode Online Medicine Delivery System · CVSS 5.3 Medium · Not analysed yet · Published 3 Sept 2026 · Tags: Broken access control, Unrestricted file upload
- [ILIAS MediaPool ZipAdapter.php uploadMultipleSubtitleFileObject unrestricted upload](https://agentprime.io/advisories/CVE-2026-85135.md)
  `CVE-2026-85135` · CVE record: ILIAS · CVSS 5.3 Medium · Not analysed yet · Published 3 Sept 2026 · Tags: Broken access control, Unrestricted file upload
- [Multiple vulnerabilities in Ocsreports for OCS Inventory NG](https://agentprime.io/advisories/CVE-2026-76174.md)
  `CVE-2026-76174` · CVE record: OCS Inventory NG Ocsreports · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2026 · Tags: Unrestricted file upload
- [UnoPim File Upload RCE via TinyMCE Image Upload Endpoint](https://agentprime.io/advisories/CVE-2026-82524.md)
  `CVE-2026-82524` · CVE record: unopim unopim · CVSS 8.6 High · Not analysed yet · Published 2 Sept 2026 · Tags: Unrestricted file upload
- [elFinder: ZIP extraction bypasses uploadDeny MIME filter allowing PHP file upload (RCE)](https://agentprime.io/advisories/GHSA-gxmj-r5rf-ggwq.md)
  `GHSA-gxmj-r5rf-ggwq`, `CVE-2026-81891`, `PKSA-71vn-d2sp-v1x4` · Packagist `Studio-42/elFinder`: affected `<2.1.70`, fixed in `2.1.70` · CVSS 8.1 High · Not analysed yet · Published 2 Sept 2026 · Tags: Unrestricted file upload
- [Developer Tools <= 1.1.3 – Unauthenticated Arbitrary File Upload](https://agentprime.io/advisories/CVE-2025-9314.md)
  `CVE-2025-9314` · CVE record: Unknown Developer Tools · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Sept 2026 · Tags: Unrestricted file upload
- [Embed HTML5 Game <= 1.3 - Unauthenticated Arbitrary File Upload](https://agentprime.io/advisories/CVE-2026-4357.md)
  `CVE-2026-4357` · CVE record: Unknown Embed HTML5 Game · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Sept 2026 · Tags: Unrestricted file upload
- [Screenshot - Critical - Unsupported - SA-CONTRIB-2026-102](https://agentprime.io/advisories/CVE-2026-76782.md)
  `CVE-2026-76782` · CVE record: Drupal Screenshot · CVSS 7.3 High · Not analysed yet · Published 2 Sept 2026 · Tags: Cross-site scripting (XSS), Unrestricted file upload
- [DialogHandler UploadPaths Tampering Vulnerability in Telerik UI for ASP.NET AJAX](https://agentprime.io/advisories/CVE-2026-19219.md)
  `CVE-2026-19219` · CVE record: Progress Software Telerik UI for ASP.NET AJAX · CVSS 8.1 High · Not analysed yet · Published 2 Sept 2026 · Tags: Unrestricted file upload, CWE-345
- [Calendar invitation attachments could launch local executables](https://agentprime.io/advisories/CVE-2026-84637.md)
  `CVE-2026-84637` · CVE record: Mozilla Thunderbird · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Sept 2026 · Tags: Unrestricted file upload
- [Gravity Forms <= 3.0.2 - Unauthenticated Arbitrary File Upload via State/Chunk Hash Confusion](https://agentprime.io/advisories/CVE-2026-19513.md)
  `CVE-2026-19513` · CVE record: Gravity Forms Gravity Forms · CVSS 8.1 High · Not analysed yet · Published 1 Sept 2026 · Tags: Unrestricted file upload
- [Remote Code Execution Vulnerability in Manacle Technologies ERP System](https://agentprime.io/advisories/CVE-2026-84147.md)
  `CVE-2026-84147` · CVE record: Manacle Technologies Multi-tenant ERP System · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Sept 2026 · Tags: Unrestricted file upload
- [WPLP Cookie Consent <= 4.4.1 - Unauthenticated Arbitrary File Upload via 'upload-logo' REST Endpoint](https://agentprime.io/advisories/CVE-2026-75865.md)
  `CVE-2026-75865` · CVE record: wplegalpages WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Sept 2026 · Tags: Unrestricted file upload
- [ShopEx ECShop pack.php check_img_type unrestricted upload](https://agentprime.io/advisories/CVE-2026-82921.md)
  `CVE-2026-82921` · CVE record: ShopEx ECShop · CVSS 6.9 Medium · Not analysed yet · Published 31 Aug 2026 · Tags: Broken access control, Unrestricted file upload
- [WordPress Hash Form plugin <= 1.4.2 - Arbitrary File Upload vulnerability](https://agentprime.io/advisories/CVE-2026-81780.md)
  `CVE-2026-81780` · CVE record: hashthemes Hash Form · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Unrestricted file upload
- [WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 4.4.1 - Arbitrary File Upload vulnerability](https://agentprime.io/advisories/CVE-2026-82970.md)
  `CVE-2026-82970` · CVE record: WP Legal Pages WP Cookie Notice for GDPR, CCPA & ePrivacy Consent · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Unrestricted file upload
- [Joomla Extension - joomshaper.com - Privileged File Upload Bypass via Content Spoofing in Helix Ultimate < 2.2.10](https://agentprime.io/advisories/CVE-2026-78078.md)
  `CVE-2026-78078` · CVE record: joomshaper.com Helix Ultimate extension for Joomla · CVSS 8.9 High · Not analysed yet · Published 31 Aug 2026 · Tags: Unrestricted file upload
- [diem-project diem Widget Editor dmWidgetContentBaseMediaForm.php unrestricted upload](https://agentprime.io/advisories/CVE-2026-82679.md)
  `CVE-2026-82679` · CVE record: diem-project diem · CVSS 5.3 Medium · Not analysed yet · Published 31 Aug 2026 · Tags: Broken access control, Unrestricted file upload
- [jeecgboot jeewx-boot doUpload Endpoint MyJwWebJwid3Controller.java MyJwWebJwid3Controller.doUpload unrestricted upload](https://agentprime.io/advisories/CVE-2026-82629.md)
  `CVE-2026-82629` · CVE record: jeecgboot jeewx-boot · CVSS 5.1 Medium · Not analysed yet · Published 31 Aug 2026 · Tags: Broken access control, Unrestricted file upload
- [Cozmoslabs Profile Builder Plugin Avatar Simple Upload AJAX admin-ajax.php wppb_ajax_simple_avatar unrestricted upload](https://agentprime.io/advisories/CVE-2026-82607.md)
  `CVE-2026-82607` · CVE record: Cozmoslabs Profile Builder Plugin · CVSS 6.9 Medium · Not analysed yet · Published 31 Aug 2026 · Tags: Broken access control, Unrestricted file upload
- [BookStack before 26.05.4 Remote Code Execution via Book Cover](https://agentprime.io/advisories/CVE-2026-82450.md)
  `CVE-2026-82450` · CVE record: bookstackapp bookstack · CVSS 8.7 High · Not analysed yet · Published 29 Aug 2026 · Tags: Unrestricted file upload

Newest: <https://agentprime.io/advisories/tag/file-upload.md>
Older: <https://agentprime.io/advisories/tag/file-upload.md?cursor=WyIyMDI2LTA4LTI5VDEzOjQ3OjUzLjMxMjAwMFoiLCJDVkUtMjAyNi04MjQ1MCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=file-upload&cursor=WyIyMDI2LTA5LTE3VDA0OjI4OjE0LjY5NjAwMFoiLCJDVkUtMjAyNi04NzkzNSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/file-upload/?cursor=WyIyMDI2LTA5LTE3VDA0OjI4OjE0LjY5NjAwMFoiLCJDVkUtMjAyNi04NzkzNSJd>. Everything for agents: <https://agentprime.io/llms.txt>.