CVE-2024-2890

WordPress Tumult Hype Animations plugin <= 1.9.12 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Tumult Inc. Tumult Hype Animations.This issue affects Tumult Hype Animations: from n/a through 1.9.12.

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed

Vendors

Tumult

Products

Tumult Hype Animations

CVE-2024-27964

WordPress Zippy plugin <= 1.6.9 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Gesundheit Bewegt GmbH Zippy.This issue affects Zippy: from n/a through 1.6.9.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Gesundheit-bewegt

Products

Zippy

CVE-2024-27951

WordPress Multiple Page Generator Plugin <= 3.4.0 - Auth. Remote Code Execution (RCE) vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Themeisle Multiple Page Generator Plugin – MPG allows Upload a Web Shell to a Web Server.This issue affects Multiple Page Generator Plugin – MPG: from n/a through 3.4.0.

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed

Vendors

Themeisle

Products

Multiple Page Generator

CVE-2024-25925

WordPress WooCommerce Easy Checkout Field Editor, Fees & Discounts Plugin <= 3.5.12 is vulnerable to Arbitrary File Upload

Unrestricted Upload of File with Dangerous Type vulnerability in SYSBASICS WooCommerce Easy Checkout Field Editor, Fees & Discounts.This issue affects WooCommerce Easy Checkout Field Editor, Fees & Discounts: from n/a through 3.5.12.

CVSS 3.1 · 10 Critical EPSS < 1% KEV · Not listed

Vendors

Sysbasics

Products

Easy Checkout Field Editor

CVE-2024-25913

WordPress MoveTo Plugin <= 6.2 is vulnerable to Arbitrary File Upload

Unrestricted Upload of File with Dangerous Type vulnerability in Skymoonlabs MoveTo.This issue affects MoveTo: from n/a through 6.2.

CVSS 3.1 · 10 Critical EPSS < 1% KEV · Not listed

Vendors

Skymoonlabs

Products

Moveto

CVE-2024-25909

WordPress WP Media folder Plugin <= 5.7.2 is vulnerable to Arbitrary File Upload

Unrestricted Upload of File with Dangerous Type vulnerability in JoomUnited WP Media folder.This issue affects WP Media folder: from n/a through 5.7.2.

CVSS 3.1 · 9.9 Critical EPSS < 1% KEV · Not listed

Vendors

Joomunited

Products

Wp Media Folder

CVE-2024-24714

WordPress Icons Font Loader Plugin <= 1.1.4 is vulnerable to Arbitrary File Upload

Unrestricted Upload of File with Dangerous Type vulnerability in bPlugins LLC Icons Font Loader.This issue affects Icons Font Loader: from n/a through 1.1.4.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed

Vendors

Bplugins

Products

Icons Font Loader

CVE-2024-22152

WordPress Product Import Export for WooCommerce Plugin <= 2.3.7 is vulnerable to Arbitrary File Upload

Unrestricted Upload of File with Dangerous Type vulnerability in WebToffee Product Import Export for WooCommerce.This issue affects Product Import Export for WooCommerce: from n/a through 2.3.7.

CVSS 3.1 · 8 High EPSS < 1% KEV · Not listed

Vendors

Webtoffee

Products

Product Import Export For Woocommerce

CVE-2023-6090

WordPress Mollie Payments for WooCommerce Plugin <= 7.3.11 is vulnerable to Arbitrary File Upload

Unrestricted Upload of File with Dangerous Type vulnerability in Mollie Mollie Payments for WooCommerce.This issue affects Mollie Payments for WooCommerce: from n/a through 7.3.11.

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed

Vendors

Mollie

Products

Mollie Payments For Woocommerce

CVE-2023-6091

WordPress Theme Editor plugin <= 2.7.1 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in mndpsingh287 Theme Editor.This issue affects Theme Editor: from n/a through 2.7.1.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed

Vendors

Mndpsingh287 Wordpress

Products

Theme Editor Wordpress

CVE-2023-52221

WordPress Barcode Scanner with Inventory & Order Manager Plugin <= 1.5.1 is vulnerable to Arbitrary File Upload

Unrestricted Upload of File with Dangerous Type vulnerability in UkrSolution Barcode Scanner and Inventory manager.This issue affects Barcode Scanner and Inventory manager: from n/a through 1.5.1.

CVSS 3.1 · 10 Critical EPSS < 1% KEV · Not listed

Vendors

Ukrsolution

Products

Barcode Scanner And Inventory Manager

CVE-2023-51475

WordPress WP MLM Unilevel Plugin <= 4.0 is vulnerable to Arbitrary File Upload

Unrestricted Upload of File with Dangerous Type vulnerability in IOSS WP MLM SOFTWARE PLUGIN.This issue affects WP MLM SOFTWARE PLUGIN: from n/a through 4.0.

CVSS 3.1 · 10 Critical EPSS < 1% KEV · Not listed

Vendors

Wpmlmsoftware

Products

Wp Mlm Unilevel

CVE-2023-51473

WordPress TerraClassifieds Plugin <= 2.0.3 is vulnerable to Arbitrary File Upload

Unrestricted Upload of File with Dangerous Type vulnerability in Pixelemu TerraClassifieds – Simple Classifieds Plugin.This issue affects TerraClassifieds – Simple Classifieds Plugin: from n/a through 2.0.3.

CVSS 3.1 · 10 Critical EPSS < 1% KEV · Not listed

Vendors

Pixelemu

Products

Terraclassifieds

CVE-2023-51468

WordPress Rencontre – Dating Site Plugin <= 3.10.1 is vulnerable to Arbitrary File Upload

Unrestricted Upload of File with Dangerous Type vulnerability in Jacques Malgrange Rencontre – Dating Site.This issue affects Rencontre – Dating Site: from n/a through 3.10.1.

CVSS 3.1 · 10 Critical EPSS < 1% KEV · Not listed

Vendors

Boiteasite

Products

Download Rencontre - Dating Site

CVE-2023-51417

WordPress JVM rich text icons Plugin <= 1.2.3 is vulnerable to Arbitrary File Upload

Unrestricted Upload of File with Dangerous Type vulnerability in Joris van Montfort JVM Gutenberg Rich Text Icons.This issue affects JVM Gutenberg Rich Text Icons: from n/a through 1.2.3.

CVSS 3.1 · 9.9 Critical EPSS < 1% KEV · Not listed

Vendors

Jorisvm

Products

Jvm Gutenberg Rich Text Icons

CVE-2023-51419

WordPress BERTHA AI Plugin <= 1.11.10.7 is vulnerable to Arbitrary File Upload

Unrestricted Upload of File with Dangerous Type vulnerability in Bertha.Ai BERTHA AI. Your AI co-pilot for WordPress and Chrome.This issue affects BERTHA AI. Your AI co-pilot for WordPress and Chrome: from n/a through 1.11.10.7.

CVSS 3.1 · 10 Critical EPSS < 1% KEV · Not listed

Vendors

Bertha

Products

Bertha Ai

CVE-2023-51412

WordPress Piotnet Forms Plugin <= 1.0.25 is vulnerable to Arbitrary File Upload

Unrestricted Upload of File with Dangerous Type vulnerability in Piotnet Piotnet Forms.This issue affects Piotnet Forms: from n/a through 1.0.25.

CVSS 3.1 · 9 Critical EPSS < 1% KEV · Not listed

Vendors

Piotnet

Products

Piotnet Forms

CVE-2023-51411

WordPress Frontend Admin by DynamiApps Plugin <= 3.18.3 is vulnerable to Arbitrary File Upload

Unrestricted Upload of File with Dangerous Type vulnerability in Shabti Kaplan Frontend Admin by DynamiApps.This issue affects Frontend Admin by DynamiApps: from n/a through 3.18.3.

CVSS 3.1 · 10 Critical EPSS < 1% KEV · Not listed

Vendors

Dynamiapps

Products

Frontend Admin

CVE-2023-51409

WordPress AI Engine plugin <= 1.9.98 - Unauthenticated Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot.This issue affects AI Engine: ChatGPT Chatbot: from n/a through 1.9.98.

CVSS 3.1 · 10 Critical EPSS 63.1% KEV · Not listed

Vendors

Ai Engine Project Meowapps

Products

Ai Engine Ai Engine

CVE-2023-51410

WordPress WP Mail Log Plugin <= 1.1.2 is vulnerable to Arbitrary File Upload

Unrestricted Upload of File with Dangerous Type vulnerability in WPVibes WP Mail Log.This issue affects WP Mail Log: from n/a through 1.1.2.

CVSS 3.1 · 9.9 Critical EPSS < 1% KEV · Not listed

Vendors

Wpvibes

Products

Wp Mail Log