Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Unauthenticated File Upload

This page lists 434 vulnerabilities in this category.

Critical: 3 High: 430 Medium: 1
Vulnerability Name
CVE
CWE
Severity
SAP NetWeaver Visual Composer Unrestricted File Uploading (CVE-2025-31324)
CVE-2025-31324
CWE-434
Critical
Apache Tika XXE via PDF XFA Content (CVE-2025-66516)
CVE-2025-66516
CWE-611
Critical
Kramer VIAware RCE (CVE-2021-36356/CVE-2021-35064)
CVE-2021-35064
CWE-434
Critical
File upload XSS (Java applet)
-
CWE-79
High
WordPress Plugin Convert Docx2post Arbitrary File Upload (1.4)
-
CWE-434
High
WordPress Plugin wpShopGermany Free Arbitrary File Upload (4.0.10)
-
CWE-434
High
WordPress Plugin WP Live Chat Support Pro Arbitrary File Upload (8.0.06)
CVE-2018-12426
CWE-434
High
WordPress Plugin MapSVG Lite Arbitrary File Upload (4.0.5)
-
CWE-434
High
WordPress Plugin Peugeot Music Arbitrary File Upload (1.0)
-
CWE-434
High
WordPress Plugin Page Builder:KingComposer-Free Drag and Drop page builder by King-Theme Arbitrary File Upload (2.7.4)
-
CWE-434
High
WordPress Plugin WordPress File Upload Cross-Site Scripting (4.3.3)
CVE-2018-9844
CWE-79
High
WordPress Plugin WordPress File Upload Cross-Site Scripting (4.3.2)
CVE-2018-9172
CWE-79
High
WordPress Plugin IP Logger Arbitrary File Upload (3.1)
-
CWE-434
High
WordPress Plugin user files Arbitrary File Upload (2.4.2)
-
CWE-434
High
WordPress Plugin Church Admin Arbitrary File Upload (1.2530)
-
CWE-434
High
WordPress Plugin Advanced Contact form 7 DB Arbitrary File Upload (1.4.4)
-
CWE-434
High
WordPress Plugin Wallable-Social Networking Arbitrary File Upload (1.1)
-
CWE-434
High
WordPress Plugin Vmax Project Manager Arbitrary File Upload (1.1)
-
CWE-434
High
WordPress Plugin LearnDash LMS Arbitrary File Upload (2.5.3)
CVE-2018-25019
CWE-434
High
WordPress Plugin AccessPress Anonymous Post Pro Arbitrary File Upload (3.1.9)
CVE-2017-16949
CWE-434
High
WordPress Plugin WordPress Book List Arbitrary File Upload (5.0.11)
-
CWE-434
High
WordPress Plugin Woocommerce Product Designer Arbitrary File Upload (3.0.3)
-
CWE-434
High
WordPress Plugin Football Pool Arbitrary File Upload (2.6.3)
-
CWE-434
High
WordPress Plugin All Post Contact Form Arbitrary File Upload (1.1.4)
-
CWE-434
High
WordPress Plugin LOGOSWARE SUITE Uploader Arbitrary File Upload (1.1.6)
-
CWE-434
High
WordPress Plugin WordPress File Upload Multiple Unspecified Vulnerabilities (3.10.0)
-
-
High
WordPress Plugin Downloads Manager Arbitrary File Upload (1.0)
-
CWE-434
High
WordPress Plugin flickr picture backup Arbitrary File Upload (0.7)
CVE-2017-1002016
CWE-434
High
WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Arbitrary File Upload (2.0.21)
-
CWE-434
High
WordPress Plugin Tajer Arbitrary File Upload (1.0.5)
CVE-2018-9206
CWE-434
High
WordPress Plugin HDInvoice-Create Invoices Arbitrary File Upload (0.1)
-
CWE-434
High
WordPress Plugin Zielke Specialized Catalog Arbitrary File Upload (3.0.7)
-
CWE-434
High
WordPress Plugin Word of the day Arbitrary File Upload (1.0)
-
CWE-434
High
WordPress Plugin Listing, Classified Ads & Business Directory-uListing Arbitrary File Upload (1.2.1)
-
CWE-434
High
WordPress Plugin GoUrl Bitcoin Payment Gateway & Paid Downloads & Membership Arbitrary File Upload (1.4.14)
-
CWE-434
High
WordPress Plugin MapSVG Lite Arbitrary File Upload (4.2.4)
-
CWE-434
High
WordPress Plugin Shipping Servientrega Woocommerce Arbitrary File Upload (2.0.3)
-
CWE-434
High
WordPress Plugin Crelly Slider Arbitrary File Upload (1.3.4)
CVE-2019-15866
CWE-434
High
WordPress Plugin WP-Live Chat by 3CX Arbitrary File Upload (8.0.31)
CVE-2019-11185
CWE-434
High
WordPress Plugin User Submitted Posts Arbitrary File Upload (20190426)
-
CWE-434
High
WordPress Plugin PollDeep Arbitrary File Upload (1.2)
-
CWE-434
High
WordPress Plugin Ninja Forms with File Uploads Extension Multiple Vulnerabilities (3.0.22)
CVE-2019-10869
CWE-434
High
WordPress Plugin WooCommerce Checkout Manager Arbitrary File Upload (4.2.6)
-
CWE-434
High
WordPress Plugin WooCommerce Catalog Enquiry Arbitrary File Upload (3.0.0)
-
CWE-434
High
WordPress Plugin SupportCandy Arbitrary File Upload (2.0.0)
CVE-2019-11223
CWE-434
High
WordPress Plugin Sooqr Search Restricted File Upload (1.1.4)
-
CWE-79
High
WordPress Plugin Analytics-Gtag Restricted File Upload (1.8.1)
-
CWE-79
High
WordPress Plugin Meta Box-WordPress Custom Fields Framework Arbitrary File Upload (4.16.1)
CVE-2019-14794
CWE-434
High
WordPress Plugin Events Made Easy Arbitrary File Upload (2.1.1)
-
CWE-434
High
WordPress Plugin WP Githuber MD Arbitrary File Upload (1.4.1)
-
CWE-434
High
WordPress Plugin Clipboard Images Arbitrary File Upload (0.3)
-
CWE-434
High
WordPress Plugin Buddy Share It Allusers FB YR Arbitrary File Upload (3.2.8)
-
CWE-434
High
WordPress Plugin Baggage Freight Shipping Australia Arbitrary File Upload (0.1.0)
-
CWE-434
High
WordPress Plugin Audio Record Arbitrary File Upload (1.0)
-
CWE-434
High
WordPress Plugin 3D Product configurator for WooCommerce Arbitrary File Upload (1.5.531)
-
CWE-434
High
WordPress Plugin WordPress Download Manager Arbitrary File Upload (2.8.97)
-
CWE-434
High
WordPress Plugin Wp2android-webapp native mobile app builder free (android, IOs, Winphone mobile App) Arbitrary File Upload (1.1.4)
CVE-2017-1002003
CWE-434
High
WordPress Plugin Export any WordPress data to XML/CSV Arbitrary File Upload (0.9)
-
CWE-434
High
WordPress Plugin WordPress File Upload Arbitrary File Upload (3.8.5)
-
CWE-434
High
WordPress Plugin Product Catalog Arbitrary File Upload (3.8.6)
-
CWE-434
High
WordPress Plugin PitchPrint Arbitrary File Upload (7.1.1)
-
CWE-434
High
WordPress Plugin PitchPrint Arbitrary File Upload (7.2.1)
-
CWE-434
High
WordPress Plugin ecSTATic Arbitrary File Upload (0.9933)
-
CWE-434
High
WordPress Plugin Advanced AJAX Page Loader Arbitrary File Upload (2.7.6)
-
CWE-434
High
WordPress Plugin YAS Slideshow Arbitrary File Upload (3.4)
-
CWE-434
High
WordPress Plugin XData Toolkit Arbitrary File Upload (1.9)
-
CWE-434
High
WordPress Plugin wp superb Slideshow Arbitrary File Upload (2.4)
-
CWE-434
High
WordPress Plugin WP Mobile Detector Arbitrary File Upload (3.5)
-
CWE-434
High
WordPress Plugin wp Dreamwork Gallery Arbitrary File Upload (2.3)
-
CWE-434
High
WordPress Plugin Vertical SlideShow Arbitrary File Upload (2.3)
-
CWE-434
High
WordPress Plugin Attachment Manager Arbitrary File Upload (2.1.1)
-
CWE-434
High
WordPress Plugin Smart Slideshow Arbitrary File Upload (2.4)
-
CWE-434
High
WordPress Plugin Slideshow Pro Arbitrary File Upload (2.4)
-
CWE-434
High
WordPress Plugin Resume Submissions & Job Postings Arbitrary File Upload (2.5.3)
-
CWE-434
High
WordPress Plugin Remote Upload Arbitrary File Upload (1.2.1)
-
CWE-434
High