tag
Unrestricted-File-Upload
Critical
Webkul Medical Prescription Attachment for WooCommerce — Unrestricted File Upload to Web Shell (CVE-2025-29009)
CVE-2025-29009·
Webkul "Medical Prescription Attachment Plugin for WooCommerce" (WordPress plugin)
patched
Critical
SAP NetWeaver Visual Composer Unrestricted File Upload RCE (CVE-2025-31324)
CVE-2025-31324·
SAP NetWeaver Application Server (AS) Java — Visual Composer component (VCFRAMEWORK), specifically the Metadata Uploader servlet
patched
Critical
Monsta FTP Pre-Authentication Remote Code Execution via Arbitrary File Upload (CVE-2025-34299)
CVE-2025-34299·
Monsta FTP (web-based FTP manager)
patched
High
Visitor Management System 1.0 — Unrestricted File Upload to RCE (CVE-2026-37748)
CVE-2026-37748·
Visitor Management System (sanjay1313) 1.0
unpatched
High
Schema & Structured Data for WP & AMP Unauthenticated Unrestricted File Upload (CVE-2026-9067)
CVE-2026-9067·
Schema & Structured Data for WP & AMP (WordPress plugin, schema-and-structured-data-for-wp)
unpatched
High
Saleor Stored XSS via Unrestricted File Upload (CVE-2026-23499)
CVE-2026-23499·
Saleor (saleor/saleor)
patched
Critical
Krayin CRM — TinyMCE Upload Unrestricted File Upload to RCE (CVE-2026-38526)
CVE-2026-38526·
Krayin CRM
unpatched