Skip to content
OpenAdvisories

Archive

19 July 2025

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Critical 9.8
    CVE-2015-10138 Public exploit

    Work The Flow File Upload <= 2.5.2 - Arbitrary File Upload

    The Work The Flow File Upload plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the jQuery-File-Upload-9.5.0 server and test files in versions up to, and including, 2.5.2. This makes it possible for unauthenti…

  • Critical 9.8
    CVE-2015-10135 Public exploit

    WPshop 2 – E-Commerce < 1.3.9.6 - Arbitrary File Upload

    The WPshop 2 – E-Commerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ajaxUpload function in versions before 1.3.9.6. This makes it possible for unauthenticated attackers to upload arbitrary files on…

  • Critical 9.8
    CVE-2012-10019 Public exploit

    Front-end Editor < 2.3 - Arbitrary File Upload

    The Front End Editor plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via the upload.php file in versions before 2.3. This makes it possible for unauthenticated attackers to upload arbitrary files on the affecte…

  • Critical 9.8
    CVE-2016-15043 Public exploit Scanner template

    WP Mobile Detector <= 3.5 - Arbitrary File Upload

    The WP Mobile Detector plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in resize.php file in versions up to, and including, 3.5. This makes it possible for unauthenticated attackers to upload arbitrary files on…