Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

Unauthenticated File Upload

This page lists 433 vulnerabilities in this category.

Critical: 2 High: 430 Medium: 1
Vulnerability Name
CVE
CWE
Severity
WordPress Plugin Magic Fields Arbitrary File Upload (1.6.3.2)
-
CWE-434
High
WordPress Plugin Jssor Slider Arbitrary File Upload (1.3)
-
CWE-434
High
WordPress Plugin Image News slider Arbitrary File Upload (3.5)
-
CWE-434
High
WordPress Plugin Homepage SlideShow Arbitrary File Upload (2.3)
-
CWE-434
High
WordPress Plugin Catpro Gallery Arbitrary File Upload (3.8)
-
CWE-434
High
WordPress Plugin Carousel slideshow Arbitrary File Upload (3.11)
-
CWE-434
High
WordPress Plugin Adblock Blocker Arbitrary File Upload (0.0.1)
-
CWE-434
High
WordPress Plugin Estatik Real Estate Arbitrary File Upload (2.2.5)
-
CWE-434
High
WordPress Plugin Elementor Website Builder Arbitrary File Upload (2.7.4)
CVE-2020-7055
CWE-434
High
WordPress Plugin PHP Analytics Arbitrary File Upload (1.0.0.2)
-
CWE-434
High
WordPress Plugin WordPress Mobile app Builder-Convert WordPress site to native mobile apps Arbitrary File Upload (1.05)
CVE-2017-1002001
CWE-434
High
WordPress Plugin Webapp builder (Free mobile apps native iPhone iOS & Android Winphone mobile apps) Arbitrary File Upload (2.0)
CVE-2017-1002002
CWE-434
High
WordPress Plugin Mobile App Native (Make a mobile app-Native iPhone & Android Mobile App FREE) Arbitrary File Upload (3.0)
CVE-2017-6104
CWE-434
High
WordPress Plugin How to Create an App for Android iPhone Easytouch Arbitrary File Upload (3.0)
CVE-2017-1002000
CWE-434
High
WordPress Plugin WP Simple Cart Arbitrary File Upload (1.0.15)
-
CWE-434
High
WordPress Plugin Web Tripwire Arbitrary File Upload (0.1.1)
-
CWE-434
High
WordPress Plugin SpamTask Arbitrary File Upload (1.3.6)
-
CWE-434
High
WordPress Plugin Templatic Tevolution Arbitrary File Upload (2.3.6)
-
CWE-434
High
WordPress Plugin Social Networking & E-commerce Arbitrary File Upload (0.0.32)
-
CWE-434
High
WordPress Plugin Seo Spy Arbitrary File Upload (2.6)
-
CWE-434
High
WordPress Plugin DOP Slider Arbitrary File Upload (1.0)
-
CWE-434
High
WordPress Plugin Estatik Real Estate Arbitrary File Upload (2.3.0)
-
CWE-434
High
WordPress Plugin Developer Tools Arbitrary File Upload (1.1.4)
-
CWE-434
High
WordPress Plugin ChikunCount Arbitrary File Upload (1.3)
-
CWE-434
High
WordPress Plugin Delete All Comments Arbitrary File Upload (2.0)
-
CWE-434
High
WordPress Plugin MailCWP Arbitrary File Upload (1.100)
CVE-2016-1000156
CWE-434
High
WordPress Plugin WP Marketplace-Complete Shopping Cart/eCommerce Solution Arbitrary File Upload (2.4.1)
-
CWE-434
High
WordPress Plugin 360 Product Rotation Arbitrary File Upload (1.2.4)
-
CWE-434
High
WordPress Plugin Product Addons & Fields for WooCommerce Arbitrary File Upload (1.1)
-
CWE-434
High
WordPress Plugin N-Media Website Contact Form with File Upload Arbitrary File Upload (2.1)
-
CWE-434
High
WordPress Plugin N-Media Post Front-end Form Arbitrary File Upload (1.0)
-
CWE-434
High
WordPress Plugin Genesis Simple Defaults Arbitrary File Upload (1.0.0)
-
CWE-434
High
WordPress Plugin Frontend File Manager Arbitrary File Upload (3.9)
-
CWE-434
High
WordPress Plugin Zedna Contact form Arbitrary File Upload (1.0)
-
CWE-434
High
WordPress Plugin Simple File List Arbitrary File Upload (4.2.2)
-
CWE-434
High
WordPress Plugin WordPress File Upload Directory Traversal (4.12.2)
CVE-2020-10564
CWE-22
High
WordPress Plugin User Registration-Custom Registration Form, Login Form And User Profile Arbitrary File Upload (2.2.4)
CVE-2022-3912
CWE-434
High
WordPress Plugin BuddyPress Cover Arbitrary File Upload (2.1.4.2)
CVE-2024-35746
CWE-434
High
WordPress Plugin WP Poll Maker-Best WordPress Poll for Voting Contest Arbitrary File Upload (3.4)
CVE-2024-32514
CWE-434
High
WordPress Plugin Management App for WooCommerce-Order notifications, Order management, Lead management, Uptime Monitoring Arbitrary File Upload (1.2.2)
CVE-2024-1205
CWE-434
High
WordPress Plugin Forminator-Contact Form, Payment Form & Custom Form Builder Arbitrary File Upload (1.28.1)
CVE-2024-28890
CWE-434
High
WordPress Plugin Database for Contact Form 7, WPforms, Elementor forms Arbitrary File Upload (1.3.2)
CVE-2024-1069
CWE-434
High
WordPress Plugin WappPress-Create Mobile App for any WordPress site with our Mobile App Builder in just 1 minute Arbitrary File Upload (5.0.3)
CVE-2023-49815
CWE-434
High
WordPress Plugin Symbiostock-Sell Photos Online For Free! Arbitrary File Upload (6.0.0)
CVE-2023-49814
CWE-434
High
WordPress Plugin MW WP Form Arbitrary File Upload (5.0.1)
CVE-2023-6316
CWE-434
High
WordPress Plugin Elementor Website Builder Arbitrary File Upload (3.18.1)
CVE-2023-48777
CWE-434
High
WordPress Plugin Royal Elementor Addons and Templates Arbitrary File Upload (1.3.78)
CVE-2023-5360
CWE-434
High
WordPress Plugin User Registration-Custom Registration Form, Login Form And User Profile Arbitrary File Upload (3.0.2)
CVE-2023-3342
CWE-434
High
WordPress Plugin Image Optimizer, Resizer and CDN-Sirv Arbitrary File Upload (7.2.6)
CVE-2024-5853
CWE-434
High
WordPress Plugin Advanced Custom Fields PRO Arbitrary File Upload (5.12.2)
CVE-2022-2594
CWE-434
High
WordPress Plugin Advanced Custom Fields (ACF) Arbitrary File Upload (5.12.2)
CVE-2022-2594
CWE-434
High
WordPress Plugin Membership For WooCommerce-Add Simple Membership Plans, Recurring Revenue, Product Tags & Send Emails To Members with WooCommerce Membership Arbitrary File Upload (2.1.6)
CVE-2022-4395
CWE-434
High
WordPress Plugin Enable Media Replace Arbitrary File Upload (4.0.1)
CVE-2023-0255
CWE-434
High
WordPress Plugin YITH WooCommerce Gift Cards Premium Arbitrary File Upload (3.19.0)
CVE-2022-45359
CWE-434
High
WordPress Plugin Theme Demo Import Arbitrary File Upload (1.1.0)
CVE-2022-1538
CWE-434
High
WordPress Plugin PostmagThemes Demo Import Arbitrary File Upload (1.0.7)
CVE-2022-1540
CWE-434
High
WordPress Plugin Import all XML, CSV & TXT into WordPress Arbitrary File Upload (6.4)
-
CWE-434
High
WordPress Plugin Tatsu Arbitrary File Upload (3.3.11)
CVE-2021-25094
CWE-434
High
WordPress Plugin Free Booking for Hotels, Restaurant and Car Rental-eaSYNC Arbitrary File Upload (1.1.15)
CVE-2022-1952
CWE-434
High
WordPress Plugin Elementor Website Builder Arbitrary File Upload (3.6.2)
CVE-2022-1329
CWE-434
High
WordPress Plugin File Manager Pro Arbitrary File Upload (8.3.4)
CVE-2023-6846
CWE-434
High
WordPress Plugin Insert or Embed Articulate Content into WordPress Arbitrary File Upload (4.3000000023)
CVE-2024-0757
CWE-434
High
WordPress Plugin Drag and Drop Multiple File Upload-Contact Form 7 Cross-Site Scripting (1.3.6.2)
CVE-2022-0595
CWE-79
High
WordPress Plugin Import Spreadsheets from Microsoft Excel Arbitrary File Upload (10.1.4)
CVE-2024-38734
CWE-434
High
WordPress Plugin Media.net Ads Manager Arbitrary File Upload (2.10.13)
CVE-2024-6431
CWE-434
High
WordPress Plugin Zita Elementor Site Library Arbitrary File Upload (1.6.1)
CVE-2024-37420
CWE-434
High
WordPress Plugin Realtyna Organic IDX + WPL Real Estate Arbitrary File Upload (4.14.13)
CVE-2024-38736
CWE-434
High
WordPress Plugin Newspack Blocks Arbitrary File Upload (3.0.8)
CVE-2024-37424
CWE-434
High
WordPress Plugin Modern Events Calendar Lite Arbitrary File Upload (7.11.0)
CVE-2024-5441
CWE-434
High
WordPress Plugin Modern Events Calendar Arbitrary File Upload (7.11.0)
CVE-2024-5441
CWE-434
High
WordPress Plugin Keydatas Arbitrary File Upload (2.5.2)
CVE-2024-6220
CWE-434
High
WordPress Plugin IQ Testimonials Arbitrary File Upload (2.2.7)
CVE-2024-6314
CWE-434
High
WordPress Plugin Import XML and RSS Feeds Arbitrary File Upload (2.1.3)
CVE-2023-4300
CWE-434
High
WordPress Plugin Import XML and RSS Feeds Arbitrary File Upload (2.1.5)
CVE-2024-31292
CWE-434
High
WordPress Plugin Gutenberg Forms-WordPress Form Builder Arbitrary File Upload (2.2.9)
CVE-2024-6313
CWE-434
High