Vulnerabilities > Unrestricted Upload of File with Dangerous Type

DATE CVE VULNERABILITY TITLE RISK
2025-04-03 CVE-2025-3169 A vulnerability was found in Projeqtor up to 12.0.2.
network
high complexity
CWE-434
5.0
5.0
2025-04-02 CVE-2025-3123 A vulnerability, which was classified as critical, has been found in WonderCMS 3.5.0.
network
low complexity
CWE-434
4.7
4.7
2025-04-02 CVE-2025-2005 The Front End Users plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the file uploads field of the registration form in all versions up to, and including, 3.2.32.
network
low complexity
CWE-434
critical
 9.8
9.8
2025-04-01 CVE-2025-2891 The Real Estate 7 WordPress theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via the 'template-submit-listing.php' file in all versions up to, and including, 3.5.4.
network
low complexity
CWE-434
8.8
8.8
2025-04-01 CVE-2025-2008 The Import Export Suite for CSV and XML Datafeed plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the import_single_post_as_csv() function in all versions up to, and including, 7.19.
network
low complexity
CWE-434
8.8
8.8
2025-04-01 CVE-2025-3042 A vulnerability classified as critical was found in Project Worlds Online Time Table Generator 1.0.
network
low complexity
CWE-434
6.3
6.3
2025-04-01 CVE-2025-3041 A vulnerability classified as critical has been found in Project Worlds Online Time Table Generator 1.0.
network
low complexity
CWE-434
6.3
6.3
2025-03-31 CVE-2025-3040 A vulnerability was found in Project Worlds Online Time Table Generator 1.0.
network
low complexity
CWE-434
6.3
6.3
2025-03-31 CVE-2025-2978 A vulnerability was found in WCMS 11.
network
low complexity
CWE-434
6.3
6.3
2025-03-31 CVE-2025-2973 Unrestricted Upload of File with Dangerous Type vulnerability in Code-Projects College Management System 1.0
A vulnerability, which was classified as critical, was found in code-projects College Management System 1.0.
network
low complexity
code-projects CWE-434
critical
 9.8
9.8