Vulnerabilities > Unrestricted Upload of File with Dangerous Type

DATE CVE VULNERABILITY TITLE RISK
2025-01-20 CVE-2025-0582 Unrestricted Upload of File with Dangerous Type vulnerability in Angeljudesuarez Tailoring Management System 1.0
A vulnerability classified as critical was found in itsourcecode Farm Management System up to 1.0.
network
low complexity
angeljudesuarez CWE-434
7.2
7.2
2025-01-17 CVE-2024-13333 The Advanced File Manager plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'fma_local_file_system' function in versions 5.2.12 to 5.2.13.
network
high complexity
CWE-434
7.5
7.5
2025-01-16 CVE-2024-13355 The Admin and Customer Messages After Order for WooCommerce: OrderConvo plugin for WordPress is vulnerable to limited file uploads due to insufficient file type validation in the upload_file() function in all versions up to, and including, 13.2.
network
low complexity
CWE-434
5.4
5.4
2025-01-14 CVE-2025-0394 The WordPress CRM, Email & Marketing Automation for WordPress | Award Winner — Groundhogg plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the gh_big_file_upload() function in all versions up to, and including, 3.7.3.5.
network
low complexity
CWE-434
8.8
8.8
2025-01-09 CVE-2025-0346 Unrestricted Upload of File with Dangerous Type vulnerability in Code-Projects Content Management System 1.0
A vulnerability was found in code-projects Content Management System 1.0.
network
low complexity
code-projects CWE-434
7.2
7.2
2025-01-09 CVE-2025-0341 Unrestricted Upload of File with Dangerous Type vulnerability in Campcodes Computer Laboratory Management System 1.0
A vulnerability, which was classified as critical, has been found in CampCodes Computer Laboratory Management System 1.0.
network
low complexity
campcodes CWE-434
critical
 9.8
9.8
2025-01-09 CVE-2025-0335 Unrestricted Upload of File with Dangerous Type vulnerability in Fabianros Online Bike Rental System 1.0
A vulnerability was found in code-projects Online Bike Rental System 1.0 and classified as critical.
network
low complexity
fabianros CWE-434
critical
 9.8
9.8
2025-01-08 CVE-2024-12853 The Modula Image Gallery plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the zip upload functionality in all versions up to, and including, 2.11.10.
network
low complexity
CWE-434
8.8
8.8
2025-01-08 CVE-2024-12854 The Garden Gnome Package plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the functionality that automatically extracts 'ggpkg' files that have been uploaded in all versions up to, and including, 2.3.0.
network
low complexity
CWE-434
8.8
8.8
2025-01-07 CVE-2025-22132 Unrestricted Upload of File with Dangerous Type vulnerability in Wegia
WeGIA is a web manager for charitable institutions.
network
low complexity
wegia CWE-434
4.8
4.8