Advisories · Weakness

Unrestricted file upload.

Uploads of dangerous file types, often leading to code execution. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

CVE-2026-76552 CVE record

CVSS 8.8 High

WP Import Export Lite < 3.9.33 - Authenticated Arbitrary File Upload via Remote Image Import
- WP Import Export Lite
- Unrestricted file upload
Not analysed yet 16 Sept 2026
CVE-2026-78088 CVE record

CVSS 8.8 High

Contest Gallery <= 32.0.1 - Unauthenticated Arbitrary File Upload via 'baseUrlForFacebook' Parameter
- contest-gallery Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe
- Unrestricted file upload
Not analysed yet 16 Sept 2026
CVE-2026-92247 CVE record

CVSS 5.1 Medium

synaptikcms synaptik-cms Admin File Manager file-manager.php rename unrestricted upload
- synaptikcms synaptik-cms
- Broken access control
- Unrestricted file upload
Not analysed yet 16 Sept 2026
CVE-2026-81240 CVE record

CVSS 8.6 High

Unrestricted file upload in Dell Wyse Management Suite
- Dell Wyse Management Suite
- Unrestricted file upload
Not analysed yet 15 Sept 2026
CVE-2026-81239 CVE record

CVSS 8.6 High

Unrestricted file upload in Dell Wyse Management Suite
- Dell Wyse Management Suite
- Unrestricted file upload
Not analysed yet 15 Sept 2026
CVE-2026-81236 CVE record

CVSS 8.6 High

Unrestricted file upload in Dell Wyse Management Suite
- Dell Wyse Management Suite
- Unrestricted file upload
Not analysed yet 15 Sept 2026
CVE-2026-91849 CVE record

CVSS 5.3 Medium

WuzhiCMS Avatar Upload index.php setAvatar unrestricted upload
- WuzhiCMS
- Broken access control
- Unrestricted file upload
Not analysed yet 15 Sept 2026
CVE-2026-91005 CVE record

CVSS 5.3 Medium

SourceCodester Online Faculty Clearance System Profile Picture Upload edit_picture.php move_uploaded_file unrestricted upload
- SourceCodester Online Faculty Clearance System
- Broken access control
- Unrestricted file upload
Not analysed yet 15 Sept 2026
CVE-2026-90857 CVE record

CVSS 5.3 Medium

SourceCodester College Notes Gallery Management System Profile Upload userprofile.php unrestricted upload
- SourceCodester College Notes Gallery Management System
- Broken access control
- Unrestricted file upload
Not analysed yet 15 Sept 2026
CVE-2026-57581 CVE record

CVSS 5.3 Medium

DotVVM: Unrestricted file upload
- riganti dotvvm
- Unrestricted file upload
Not analysed yet 14 Sept 2026
CVE-2026-82793 CVE record

CVSS 8.6 High

Unrestricted file upload in Contec Co., Ltd. CAN-2-WF and others
- Contec Co., Ltd. CAN-2-WF
- Contec Co., Ltd. CAN-2-USB
- Unrestricted file upload
Not analysed yet 14 Sept 2026
CVE-2026-82780 CVE record

CVSS 8.7 High

Unrestricted file upload in Contec Co., Ltd CPS-TM341G5MB-ADSC1-931 and others
- Contec Co., Ltd CPS-TM341G5MB-ADSC1-931
- Contec Co., Ltd CPS-TM341MB-ADSC1-931
- Unrestricted file upload
Not analysed yet 14 Sept 2026
CVE-2023-34854 CVE record

CVSS 6.6 Medium

Unrestricted file upload in digitaldruid HotelDruid
- digitaldruid HotelDruid
- Unrestricted file upload
Not analysed yet 14 Sept 2026
CVE-2026-90603 CVE record

CVSS 6.9 Medium

Anil-matcha Open-Generative-AI S3 Upload upload-binary unrestricted upload
- Anil-matcha Open-Generative-AI
- Broken access control
- Unrestricted file upload
Not analysed yet 13 Sept 2026
CVE-2026-90519 CVE record

CVSS 5.3 Medium

PHPGurukul Bank Locker Management System add-locker-form.php unrestricted upload
- PHPGurukul Bank Locker Management System
- Broken access control
- Unrestricted file upload
Not analysed yet 13 Sept 2026
CVE-2026-90500 CVE record

CVSS 5.3 Medium

lenve vhr Avatar Upload userface FastDFSUtils.upload unrestricted upload
- lenve vhr
- Broken access control
- Unrestricted file upload
Not analysed yet 13 Sept 2026
CVE-2026-84171 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

WP Images Upload on Piclect <= 1.0 - Unauthenticated Arbitrary File Upload
- WP images upload on piclect
- Unrestricted file upload
Not analysed yet 12 Sept 2026
CVE-2026-81402 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

DS Ad Rotator <= 0.8 - Unauthenticated Arbitrary File Upload
- DS Ad Rotator
- Unrestricted file upload
Not analysed yet 12 Sept 2026
CVE-2026-81090 CVE record

CVSS 7.2 High

Gpx2Graphics <= 0.3 - Arbitrary File Upload via CSRF
- Gpx2Graphics
- Cross-site request forgery (CSRF)
- Unrestricted file upload
Not analysed yet 12 Sept 2026
CVE-2026-8778 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

MIPL Grouped Checkout Fields for WooCommerce <= 1.2.2 - Unauthenticated Arbitrary File Upload
- mulika MIPL Grouped Checkout Fields for WooCommerce. Customize & Organize Checkout Fields.
- Unrestricted file upload
Not analysed yet 11 Sept 2026
CVE-2026-12215 CVE record

CVSS 5.3 Medium

OTP Login & Register Woocommerce <= 2.7.2 - Unauthenticated Authentication Bypass via Brute Force
- xootix OTP Login & Register Woocommerce
- Unrestricted file upload
Not analysed yet 11 Sept 2026
CVE-2026-84063 CVE record

CVSS 8.5 High

Unrestricted file upload in D-ZERO CO.,LTD. BurgerEditor
- D-ZERO CO.,LTD. BurgerEditor
- Unrestricted file upload
Not analysed yet 10 Sept 2026
CVE-2026-18351 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Drag and Drop File Upload for Elementor Forms <= 1.6.0 - Unauthenticated Arbitrary File Upload via 'type' Parameter
- addonsorg Drag and Drop File Upload for Elementor Forms
- Unrestricted file upload
Not analysed yet 10 Sept 2026
CVE-2026-87928 CVE record

CVSS 5.1 Medium

MaxSite CMS 0.94 through 109.6 HTML Upload XSS via admin_page
- MaxSite CMS
- Unrestricted file upload
Not analysed yet 9 Sept 2026
CVE-2026-26212 CVE record

CVSS 8.6 High

Rara One Click Demo Import < 1.3.5 Arbitrary File Upload RCE
- Rara Themes Rara One Click Demo Import
- Unrestricted file upload
Not analysed yet 9 Sept 2026
CVE-2026-71805 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

An arbitrary file upload and path traversal vulnerability exists in LZ-litchi 1.0.0.
- Unrestricted file upload
Not analysed yet 9 Sept 2026
CVE-2026-54611 CVE record

CVSS 5.5 Medium

InstantCMS has Remote Code Execution in package installer
- instantsoft icms2
- Code injection
- Unrestricted file upload
Not analysed yet 8 Sept 2026
CVE-2026-86666 CVE record

CVSS 6.9 Medium

aircheng-org iWebShop-5 pic.php uploadFile unrestricted upload
- aircheng-org iWebShop-5
- Broken access control
- Unrestricted file upload
Not analysed yet 8 Sept 2026
CVE-2026-50093 CVE record

CVSS 8.9 High

Unrestricted file upload in Siemens Siveillance Control Pro V3.0 and others
- Siemens Siveillance Control Pro V3.0
- Siemens Siveillance Control Pro V4.0
- Unrestricted file upload
Not analysed yet 8 Sept 2026
CVE-2026-86305 CVE record

CVSS 6.9 Medium

light0011 cms Upload.class.php upload unrestricted upload
- light0011 cms
- Broken access control
- Unrestricted file upload
Not analysed yet 7 Sept 2026
CVE-2026-86272 CVE record

CVSS 6.9 Medium

Beijing Meite Software Technology U+Smart Enjoyment WebSite UploadFormImg.ashx unrestricted upload
- Beijing Meite Software Technology U+Smart Enjoyment WebSite
- Broken access control
- Unrestricted file upload
Not analysed yet 7 Sept 2026
CVE-2026-86239 CVE record

CVSS 6.9 Medium

liufee FeehiCMS UEditor Widget UeditorAction.php init unrestricted upload
- liufee FeehiCMS
- Broken access control
- Unrestricted file upload
Not analysed yet 7 Sept 2026
CVE-2026-44402 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Voltronic Power SNMP Web Pro 1.1 Unauthenticated RCE via upload.cgi
- Voltronic Power SNMP Web Pro
- Unrestricted file upload
Not analysed yet 4 Sept 2026
CVE-2026-12483 CVE record

CVSS 7.5 High

LearnDash LMS <= 5.1.5 - Authenticated (Subscriber+) Arbitrary File Upload via Assignment Upload Handler
- StellarWP LearnDash LMS
- Unrestricted file upload
Not analysed yet 4 Sept 2026
CVE-2026-78839 CVE record

CVSS 8.1 High

An arbitrary file upload vulnerability in AppNitro MachForm v30 allows attackers to execute arbitrary code via uploading a crafted .phar file.
- Unrestricted file upload
Not analysed yet 4 Sept 2026
CVE-2026-75169 CVE record

CVSS 8.8 High

An arbitrary file upload vulnerability in /cgi-bin/ugwupload.cgi of MBS-Solutions X-Serie Gateway firmware V6_00_05 allows a remote authenticated user with Admin role to upload files with arbitrary c…
- Unrestricted file upload
Not analysed yet 4 Sept 2026
CVE-2026-71620 CVE record

CVSS 8.1 High

File Upload vulnerability in Zhao-github ApiAdmin v.5.0.1 allows a remote attacker to execute arbitrary code via a crafted .php file
- Unrestricted file upload
Not analysed yet 4 Sept 2026
CVE-2026-50894 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

easyadmin v2.0.2.2 is vulnerable to Unrestricted Upload of File with Dangerous Type in the background management interface which allows authenticated remote attackers to execute arbitrary code and ga…
- Unrestricted file upload
Not analysed yet 4 Sept 2026
CVE-2026-85208 CVE record

CVSS 6.9 Medium

itsourcecode Online Medicine Delivery System Order Management Controller controller.php doInsert unrestricted upload
- itsourcecode Online Medicine Delivery System
- Broken access control
- Unrestricted file upload
Not analysed yet 3 Sept 2026
CVE-2026-85186 CVE record

CVSS 5.3 Medium

itsourcecode Online Medicine Delivery System Customer Controller controller.php doupdateimage unrestricted upload
- itsourcecode Online Medicine Delivery System
- Broken access control
- Unrestricted file upload
Not analysed yet 3 Sept 2026
CVE-2026-85135 CVE record

CVSS 5.3 Medium

ILIAS MediaPool ZipAdapter.php uploadMultipleSubtitleFileObject unrestricted upload
- ILIAS
- Broken access control
- Unrestricted file upload
Not analysed yet 3 Sept 2026
CVE-2026-76174 CVE record

CVSS 9.4 CriticalCritical · CVSS 9+

Multiple vulnerabilities in Ocsreports for OCS Inventory NG
- OCS Inventory NG Ocsreports
- Unrestricted file upload
Not analysed yet 3 Sept 2026
CVE-2026-82524 CVE record

CVSS 8.6 High

UnoPim File Upload RCE via TinyMCE Image Upload Endpoint
- unopim
- Unrestricted file upload
Not analysed yet 2 Sept 2026
Studio-42/elFinder Packagist

CVSS 8.1 High

elFinder: ZIP extraction bypasses uploadDeny MIME filter allowing PHP file upload (RCE)
- Unrestricted file upload
<2.1.70 · fixed in 2.1.70

GHSA-gxmj-r5rf-ggwq · CVE-2026-81891 Not analysed yet 2 Sept 2026
CVE-2025-9314 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Developer Tools <= 1.1.3 – Unauthenticated Arbitrary File Upload
- Developer Tools
- Unrestricted file upload
Not analysed yet 2 Sept 2026
CVE-2026-4357 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Embed HTML5 Game <= 1.3 - Unauthenticated Arbitrary File Upload
- Embed HTML5 Game
- Unrestricted file upload
Not analysed yet 2 Sept 2026
CVE-2026-76782 CVE record

CVSS 7.3 High

Screenshot - Critical - Unsupported - SA-CONTRIB-2026-102
- Drupal Screenshot
- Cross-site scripting (XSS)
- Unrestricted file upload
Not analysed yet 2 Sept 2026
CVE-2026-19219 CVE record

CVSS 8.1 High

DialogHandler UploadPaths Tampering Vulnerability in Telerik UI for ASP.NET AJAX
- Progress Software Telerik UI for ASP.NET AJAX
- Unrestricted file upload
- CWE-345
Not analysed yet 2 Sept 2026
CVE-2026-84637 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Calendar invitation attachments could launch local executables
- Mozilla Thunderbird
- Unrestricted file upload
Not analysed yet 1 Sept 2026
CVE-2026-19513 CVE record

CVSS 8.1 High

Gravity Forms <= 3.0.2 - Unauthenticated Arbitrary File Upload via State/Chunk Hash Confusion
- Gravity Forms
- Unrestricted file upload
Not analysed yet 1 Sept 2026
CVE-2026-84147 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Remote Code Execution Vulnerability in Manacle Technologies ERP System
- Manacle Technologies Multi-tenant ERP System
- Unrestricted file upload
Not analysed yet 1 Sept 2026
CVE-2026-75865 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

WPLP Cookie Consent <= 4.4.1 - Unauthenticated Arbitrary File Upload via 'upload-logo' REST Endpoint
- wplegalpages WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode
- Unrestricted file upload
Not analysed yet 1 Sept 2026
CVE-2026-82921 CVE record

CVSS 6.9 Medium

ShopEx ECShop pack.php check_img_type unrestricted upload
- ShopEx ECShop
- Broken access control
- Unrestricted file upload
Not analysed yet 31 Aug 2026
CVE-2026-81780 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

WordPress Hash Form plugin <= 1.4.2 - Arbitrary File Upload vulnerability
- hashthemes Hash Form
- Unrestricted file upload
Not analysed yet 31 Aug 2026
CVE-2026-82970 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 4.4.1 - Arbitrary File Upload vulnerability
- WP Legal Pages WP Cookie Notice for GDPR, CCPA & ePrivacy Consent
- Unrestricted file upload
Not analysed yet 31 Aug 2026
CVE-2026-78078 CVE record

CVSS 8.9 High

Joomla Extension - joomshaper.com - Privileged File Upload Bypass via Content Spoofing in Helix Ultimate < 2.2.10
- joomshaper.com Helix Ultimate extension for Joomla
- Unrestricted file upload
Not analysed yet 31 Aug 2026
CVE-2026-82679 CVE record

CVSS 5.3 Medium

diem-project diem Widget Editor dmWidgetContentBaseMediaForm.php unrestricted upload
- diem
- Broken access control
- Unrestricted file upload
Not analysed yet 31 Aug 2026
CVE-2026-82629 CVE record

CVSS 5.1 Medium

jeecgboot jeewx-boot doUpload Endpoint MyJwWebJwid3Controller.java MyJwWebJwid3Controller.doUpload unrestricted upload
- jeecgboot jeewx-boot
- Broken access control
- Unrestricted file upload
Not analysed yet 31 Aug 2026
CVE-2026-82607 CVE record

CVSS 6.9 Medium

Cozmoslabs Profile Builder Plugin Avatar Simple Upload AJAX admin-ajax.php wppb_ajax_simple_avatar unrestricted upload
- Cozmoslabs Profile Builder Plugin
- Broken access control
- Unrestricted file upload
Not analysed yet 31 Aug 2026
CVE-2026-82450 CVE record

CVSS 8.7 High

BookStack before 26.05.4 Remote Code Execution via Book Cover
- bookstack
- Unrestricted file upload
Not analysed yet 29 Aug 2026