Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

Unauthenticated File Upload

This page lists 434 vulnerabilities in this category.

Critical: 2 High: 430 Medium: 2
Vulnerability Name
CVE
CWE
Severity
WordPress Plugin Category Grid View Gallery TimThumb Arbitrary File Upload (0.1.1)
CVE-2011-4106
CWE-20
High
WordPress Plugin Kino Gallery TimThumb Arbitrary File Upload (1.0)
CVE-2011-4106
CWE-20
High
WordPress Plugin iSlidex TimThumb Arbitrary File Upload (2.7)
CVE-2011-4106
CWE-20
High
WordPress Plugin IGIT Related Posts With Thumb Image After Posts TimThumb Arbitrary File Upload (3.9.7)
CVE-2011-4106
CWE-20
High
WordPress Plugin IGIT Posts Slider Widget TimThumb Arbitrary File Upload (1.1)
CVE-2011-4106
CWE-20
High
WordPress Plugin Extend WordPress-Various Shortcodes & Widgets TimThumb Arbitrary File Upload (2.1.01)
CVE-2011-4106
CWE-20
High
WordPress Plugin Easy Comment Uploads 'upload.php' Arbitrary File Upload (0.61)
-
CWE-434
High
WordPress Plugin DukaPress TimThumb Arbitrary File Upload (2.3.2)
CVE-2011-4106
CWE-20
High
WordPress Plugin DP Thumbnail TimThumb Arbitrary File Upload (1.0)
CVE-2011-4106
CWE-20
High
WordPress Plugin Cms Pack TimThumb Arbitrary File Upload (1.3)
CVE-2011-4106
CWE-20
High
WordPress Plugin Category List Portfolio Page TimThumb Arbitrary File Upload (1.2.3)
CVE-2011-4106
CWE-20
High
WordPress Plugin CAC Featured Content TimThumb Arbitrary File Upload (0.8)
CVE-2011-4106
CWE-20
High
WordPress Plugin Recip.ly 'uploadImage.php' Arbitrary File Upload (1.1.7)
-
CWE-434
High
WordPress Plugin Auto Attachments TimThumb Arbitrary File Upload (0.3)
CVE-2011-4106
CWE-20
High
WordPress Plugin A. Gallery TimThumb Arbitrary File Upload (0.9rev378511)
CVE-2011-4106
CWE-20
High
WordPress Plugin 1 Flash Gallery 'upload.php' Arbitrary File Upload (1.5.7)
-
CWE-434
High
WordPress Plugin Image Gallery with Slideshow 'upload-file.php' Arbitrary File Upload (1.5)
-
CWE-20
High
WordPress Plugin Grapefile File Sharing 'grapeupload.php' Arbitrary File Upload (1.1)
-
CWE-434
High
WordPress Plugin Real WYSIWYG 'insert_file.php' Arbitrary File Upload (0.0.2)
-
CWE-434
High
WordPress Plugin EditorMonkey Remote File Upload (2.5)
-
CWE-20
High
WordPress Plugin User Photo 'user-photo.php' Arbitrary File Upload (0.9.4)
CVE-2013-1916
CWE-20
High
WordPress Plugin Uploadify Remote File Upload (1.0)
-
CWE-20
High
WordPress Plugin Enable Media Replace SQL Injection and Arbitrary File Upload Vulnerabilities (2.3)
-
CWE-434
High
WordPress Plugin Uploader 'uploadify.php' Arbitrary File Upload (1.0.4)
-
CWE-434
High
WordPress Plugin Nmedia WordPress Member Conversation 'doupload.php' Arbitrary File Upload (1.3)
CVE-2012-3577
CWE-264
High
WordPress Plugin Omni Secure Files 'upload.php' Arbitrary File Upload (0.1.13)
-
CWE-434
High
WordPress Plugin PDW Media File Browser 'upload.php' Arbitrary File Upload (1.1)
-
CWE-434
High
WordPress Plugin Simple Dropbox Upload Arbitrary File Upload (1.8.8)
CVE-2013-5963
CWE-434
High
WordPress Plugin Product Catalog Arbitrary File Upload (3.1.1)
-
CWE-434
High
WordPress Plugin PHP Event Calendar for WordPress Arbitrary File Upload (1.6)
-
CWE-434
High
WordPress Plugin N-Media Website Contact Form with File Upload Arbitrary File Upload (1.3.4)
-
CWE-434
High
WordPress Plugin InBoundio Marketing Arbitrary File Upload (2.0.3)
-
CWE-434
High
WordPress Plugin Another WordPress Classifieds Arbitrary File Upload (3.3.2)
-
CWE-434
High
WordPress Plugin Akeeba Backup CORE for WordPress Arbitrary File Upload (1.1.3)
CVE-2014-7228
CWE-310
High
WordPress Plugin WPshop-eCommerce Arbitrary File Upload (1.3.9.5)
-
CWE-434
High
WordPress Plugin WP Marketplace-Complete Shopping Cart/eCommerce Solution Arbitrary File Upload (1.2.1)
-
CWE-434
High
WordPress Plugin WP Front-End Repository Manager Arbitrary File Upload (1.1)
-
CWE-434
High
WordPress Plugin vSlider Multi Image Slider for WordPress Arbitrary File Upload (4.1.2)
-
CWE-434
High
WordPress Plugin SB Uploader Arbitrary File Upload (4.1)
-
CWE-434
High
WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Arbitrary File Upload (1.0.83)
-
CWE-434
High
WordPress Plugin Rich Widget Arbitrary File Upload (0.2.4)
-
CWE-434
High
WordPress Plugin ReFlex Gallery Arbitrary File Upload (3.1.3)
CVE-2015-4133
CWE-434
High
WordPress Plugin Monsters Editor for WP Super Edit Arbitrary File Upload (1.1)
-
CWE-434
High
WordPress Plugin Lazy SEO Arbitrary File Upload (1.3.2)
CVE-2013-5961
CWE-434
High
WordPress Plugin Import any XML or CSV File to WordPress Pro Arbitrary File Upload (4.1.0)
-
CWE-434
High
WordPress Plugin Import any XML or CSV File to WordPress Arbitrary File Upload (3.2.3)
-
CWE-434
High
WordPress Plugin File Uploader Arbitrary File Upload (1.1)
-
CWE-434
High
WordPress Plugin Special Text Boxes Arbitrary File Upload (5.1.90)
-
CWE-434
High
WordPress Plugin Gravity Forms Arbitrary File Upload (1.8.19)
-
CWE-434
High
WordPress Plugin Contact Form 7 Arbitrary File Upload (3.5.2)
-
CWE-434
High
WordPress Plugin Contact Form 7 Arbitrary File Upload (3.5.3)
-
CWE-434
High
WordPress Plugin Simple Ads Manager Arbitrary File Upload (2.5.94)
CVE-2015-2825
CWE-434
High
WordPress Plugin VideoWhisper Video Conference Integration Arbitrary File Upload (4.91.8)
CVE-2015-9271
CWE-434
High
WordPress Plugin PICA Photo Gallery 'picaPhotosResize.php' Arbitrary File Upload (1.0)
-
CWE-434
High
WordPress Plugin Thumbnail carousel slider Arbitrary File Upload (1.0)
-
CWE-434
High
WordPress Plugin WP User Frontend-Registration, User Profile, Membership, Content Restriction, User Directory, and Frontend Post Submission Arbitrary File Upload (2.3.10)
-
CWE-434
High
WordPress Plugin WordPress Backup and Migrate-Backup Guard Arbitrary File Upload (1.0.2)
-
CWE-434
High
WordPress Plugin Gravity Forms Advanced File Uploader Unspecified Vulnerability (1.18)
-
-
High
WordPress Plugin Gravity Upload Ajax Arbitrary File Upload (1.1)
CVE-2014-4972
CWE-434
High
WordPress Plugin WordPress File Upload Arbitrary File Upload (3.4.0)
-
CWE-434
High
WordPress Plugin Video Gallery /w YouTube, Vimeo Arbitrary File Upload (8.48)
-
CWE-434
High
WordPress Plugin Users Ultra Membership Arbitrary File Upload (1.5.58)
-
CWE-434
High
WordPress Plugin WordPress Infinite Scroll-Ajax Load More Arbitrary File Upload (2.8.1.1)
-
CWE-434
High
WordPress Plugin NextGEN Gallery-WordPress Gallery Arbitrary File Upload (2.1.10)
-
CWE-434
High
WordPress Plugin Csv2WPeC Coupon Arbitrary File Upload (1.1)
CVE-2015-1000013
CWE-434
High
WordPress Plugin WordPress File Upload Multiple Vulnerabilities (2.7.6)
-
CWE-434
High
WordPress Plugin VideoWhisper Video Presentation Arbitrary File Upload (3.31.17)
CVE-2015-9272
CWE-434
High
WordPress Plugin MailCWP Arbitrary File Upload (1.99)
CVE-2015-1000000
CWE-434
High
WordPress Plugin Fast Image Adder Arbitrary File Upload (1.1)
CVE-2015-1000001
CWE-434
High
WordPress Plugin ACF Frontend display Arbitrary File Upload (2.0.5)
CVE-2015-9479
CWE-434
High
WordPress Plugin ZoomSounds-WordPress Wave Audio Player with Playlist Arbitrary File Upload (2.0)
-
CWE-434
High
WordPress Plugin N-Media Website Contact Form with File Upload Local File Inclusion (1.5)
-
CWE-22
High
WordPress Plugin Frontend File Manager Arbitrary File Upload (3.7)
-
CWE-434
High
WordPress Plugin Aviary Image Editor Add-on For Gravity Forms Arbitrary File Upload (3.0)
CVE-2015-4455
CWE-434
High
WordPress Plugin Slider Revolution Responsive Arbitrary File Upload (3.0.95)
-
CWE-434
High