Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

Unauthenticated File Upload

This page lists 433 vulnerabilities in this category.

Critical: 2 High: 430 Medium: 1
Vulnerability Name
CVE
CWE
Severity
WordPress Plugin Annonces 'theme.php' Arbitrary File Upload (1.2.0.1)
-
CWE-434
High
WordPress Plugin Ajax Multi Upload 'upload.php' Arbitrary File Upload (1.1)
-
CWE-434
High
WordPress Plugin 3D Flick Slideshow 'upload.php' Arbitrary File Upload (2.1)
-
CWE-434
High
WordPress Plugin 3D Banner Rotator 'upload.php' Arbitrary File Upload (2.1)
-
CWE-434
High
WordPress Plugin Dean's FCKEditor with pwwang's code Arbitrary File Upload (1.0.0)
-
CWE-20
High
WordPress Plugin Magn WP Drag and Drop Upload Arbitrary File Upload (1.1.4)
-
CWE-20
High
WordPress Plugin Comment Extra Fields 'cef-upload.php' Arbitrary File Upload (1.7)
-
CWE-434
High
WordPress Plugin Kish Guest Posting 'uploadify.php' Arbitrary File Upload (1.2)
CVE-2012-5318
CWE-434
High
WordPress Plugin AllWebMenus WordPress Menu 'actions.php' Arbitrary File Upload (1.1.8)
CVE-2012-1011
CWE-264
High
WordPress Plugin WP Symposium Arbitrary File Upload Vulnerabilities (11.11.26)
CVE-2011-5051
CWE-434
High
WordPress Plugin wpcu3er 'ajaxReq.php' Arbitrary File Upload (0.55)
-
CWE-434
High
WordPress Plugin WP Marketplace TimThumb Arbitrary File Upload (1.1.0)
CVE-2011-4106
CWE-20
High
WordPress Plugin WordPress Popular Posts TimThumb Arbitrary File Upload (2.1.4)
-
CWE-434
High
WordPress Plugin VK Gallery TimThumb Arbitrary File Upload (1.1.0)
CVE-2011-4106
CWE-20
High
WordPress Plugin Verve Meta Boxes TimThumb Arbitrary File Upload (1.2.8)
CVE-2011-4106
CWE-20
High
WordPress Plugin User Avatar TimThumb Arbitrary File Upload (1.3.7)
CVE-2011-4106
CWE-20
High
WordPress Plugin Simple Slide Show TimThumb Arbitrary File Upload (1.0)
-
CWE-434
High
WordPress Plugin Carousel slideshow 'upload.php' Arbitrary File Upload (3.9)
-
CWE-434
High
WordPress Plugin Contus HD FLV Player 'uploadVideo.php' Arbitrary File Upload (1.7)
-
CWE-434
High
WordPress Plugin Rekt Slideshow TimThumb Arbitrary File Upload (1.0.5)
CVE-2011-4106
CWE-20
High
WordPress Plugin Homepage SlideShow 'upload.php' Arbitrary File Upload (2.0)
-
CWE-434
High
WordPress Plugin MM Forms Community 'doajaxfileupload.php' Arbitrary File Upload (2.2.6)
CVE-2012-3574
CWE-434
High
WordPress Plugin Matrix Gallery 'upload.php' Arbitrary File Upload (2.1)
-
CWE-434
High
WordPress Plugin MAC PHOTO GALLERY 'upload-file.php' Arbitrary File Upload (2.7)
-
CWE-434
High
WordPress Plugin Lim4wp 'upload.php' Arbitrary File Upload (1.1.1)
-
CWE-434
High
WordPress Plugin LB Mixed Slideshow 'upload.php' Arbitrary File Upload (1.0)
-
CWE-434
High
WordPress Plugin Katalyst TimThumb 'timthumb.php' Arbitrary File Upload (1.0)
-
CWE-434
High
WordPress Plugin Invit0r 'ofc_upload_image.php' Arbitrary File Upload (0.22)
-
CWE-434
High
WordPress Plugin Image News slider 'upload.php' Arbitrary File Upload (3.3)
CVE-2012-4327
CWE-434
High
WordPress Plugin Hungred Post Thumbnail 'hpt_file_upload.php' Arbitrary File Upload (2.1.9)
-
CWE-434
High
WordPress Plugin HTML5 AV Manager for WordPress 'custom.php' Arbitrary File Upload (0.2.7)
-
CWE-434
High
WordPress Plugin Gallery by BestWebSoft 'php.php' Arbitrary File Upload (3.06)
-
CWE-434
High
WordPress Plugin Custom Background 'uploadify.php' Arbitrary File Upload (1.01)
-
CWE-434
High
WordPress Plugin Frontend File Manager Arbitrary File Upload (1.8)
-
CWE-434
High
WordPress Plugin Front File Manager 'upload.php' Arbitrary File Upload (0.1)
-
CWE-434
High
WordPress Plugin Front End Upload 'upload.php' Arbitrary File Upload (0.5.3)
-
CWE-434
High
WordPress Plugin FoxyPress 'uploadify.php' Arbitrary File Upload (0.4.2.1)
-
CWE-434
High
WordPress Plugin Font Uploader 'font-upload.php' Arbitrary File Upload (1.2.4)
CVE-2012-3814
CWE-434
High
WordPress Plugin Flip Book 'php.php' Arbitrary File Upload (1.0)
-
CWE-434
High
WordPress Plugin FCChat Widget 'Upload.php' Arbitrary File Upload (2.2.13.1)
CVE-2012-3578
CWE-264
High
WordPress Plugin Fancy Gallery 'image-upload.php' Arbitrary File Upload (1.2.4)
-
CWE-434
High
WordPress Plugin Evarisk 'uploadPhotoApres.php' Arbitrary File Upload (5.1.5.4)
-
CWE-434
High
WordPress Plugin Drag & Drop File Uploader 'dnd-upload.php' Arbitrary File Upload (0.1)
-
CWE-434
High
WordPress Plugin Custom Content Type Manager 'upload_form.php' Arbitrary File Upload (0.9.5.13)
-
CWE-434
High
WordPress Plugin Rent-A-Car TimThumb Arbitrary File Upload (1.0)
CVE-2011-4106
CWE-20
High
WordPress Plugin Really Easy Slider TimThumb Arbitrary File Upload (0.1)
CVE-2011-4106
CWE-20
High
WordPress Plugin Omni Secure Files 'upload.php' Arbitrary File Upload (0.1.13)
-
CWE-434
High
DotCMS unrestricted file upload (CVE-2022-26352)
CVE-2022-26352
CWE-434
High
WordPress Plugin Woopra Analytics Arbitrary File Upload (1.4.3.1)
CVE-2009-4140
CWE-434
High
WordPress Plugin Instinct e-Commerce Arbitrary File Upload (3.4)
CVE-2008-6811
CWE-434
High
WordPress Plugin Downloads Manager 'upload.php' Arbitrary File Upload (0.2)
CVE-2008-3362
CWE-20
High
WordPress Plugin Wp-FileManager 'ajaxfilemanager.php' Arbitrary File Upload (1.2)
CVE-2008-0222
CWE-94
High
Joomla! Core Arbitrary File Upload (2.5.0 - 3.8.7)
CVE-2018-11322
CWE-434
High
Joomla! Core 3.x.x Arbitrary File Upload (3.0.0 - 3.1.4)
CVE-2013-5576
CWE-434
High
Joomla! Core 2.5.x Arbitrary File Upload (2.5.0 - 2.5.13)
CVE-2013-5576
CWE-434
High
Joomla! Core 1.5.x Arbitrary File Upload (1.5.0 - 1.5.15)
CVE-2010-1433
CWE-434
High
Joomla! Core 1.5.12 Arbitrary File Upload (1.5.12)
CVE-2011-4908
CWE-434
High
Fortinet FortiNAC RCE via arbitrary file upload
CVE-2022-39952
CWE-610
High
Dragonfly Arbitrary File Read/Write (CVE-2021-33564)
CVE-2021-33564
CWE-20
High
WordPress Plugin DB Toolkit 'uploadify.php' Arbitrary File Upload (0.1.10)
-
CWE-434
High
Telerik Web UI Insecure Direct Object Reference
CVE-2017-11357
CWE-78
High
Telerik Web UI Unrestricted File Upload (CVE-2017-11317)
CVE-2017-11317
CWE-78
High
Telerik Web UI Unrestricted File Upload (CVE-2014-2217)
CVE-2014-2217
CWE-78
High
jQuery File Upload unauthenticated arbitrary file upload
CVE-2018-9206
CWE-434
High
ColdFusion Arbitrary File Upload
CVE-2018-15961
CWE-434
High
Cross-site Scripting via File Upload
-
CWE-79
High
Unrestricted File Upload
-
CWE-434
High
ColdFusion 8 FCKEditor file upload vulnerability
CVE-2009-2265
CWE-22
High
Ektron CMS multiple vulnerabilities
-
CWE-434
High
WordPress MailPoet Newsletters (wysija-newsletters) unauthenticated file upload
-
CWE-434
High
WordPress OptimizePress unrestricted file upload
CVE-2013-7102
CWE-20
High
WordPress Plugin Simple:Press Security Bypass and Arbitrary File Upload Vulnerabilities (4.1.2)
-
CWE-434
High
WordPress Plugin Recip.ly 'uploadImage.php' Arbitrary File Upload (1.1.7)
-
CWE-434
High
WordPress Plugin MediaRSS external gallery TimThumb Arbitrary File Upload (0.1)
CVE-2011-4106
CWE-20
High
WordPress Plugin Category List Portfolio Page TimThumb Arbitrary File Upload (1.2.3)
CVE-2011-4106
CWE-20
High