Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2608)
CWE-79 (1775)
CWE-416 (1278)
CWE-862 (1126)
CWE-89 (1088)
CWE-22 (1003)
CWE-125 (861)
CWE-200 (836)
CWE-306 (831)
CWE-122 (821)
CWE-20 (785)
CWE-78 (697)
CWE-918 (680)
CWE-787 (674)
CWE-94 (626)
CWE-863 (600)
CWE-74 (599)
CWE-639 (530)
CWE-400 (510)
CWE-269 (499)
CWE-119 (493)
CWE-770 (428)
CWE-502 (422)
CWE-287 (419)
CWE-121 (403)
CWE-77 (371)
CWE-190 (360)
CWE-362 (319)
CWE-352 (270)
CWE-285 (240)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2025-58963 |
critical | 10.0 | 0.0049 | 2025-10-22 | Unrestricted Upload of File with Dangerous Type vulnerability in 7oroof Medcity medcity allows Uploa | |
CVE-2026-40772 |
critical | 10.0 | 0.0036 | 2026-06-15 | Unauthenticated Arbitrary File Upload in GeekyBot <= 1.2.2 versions. | |
CVE-2026-48908 |
critical | 10.0 | 0.8851 | 2026-06-20 | JoomShaper SP Page Builder contains an unrestricted upload of file with dangerous type vulnerability | KEV |
CVE-2026-48939 |
critical | 10.0 | 0.2007 | 2026-06-20 | iCagenda contains an unrestricted upload of file with dangerous type vulnerability that allows the u | KEV |
CVE-2026-57700 |
critical | 10.0 | 0.0052 | 2026-06-25 | Unrestricted Upload of File with Dangerous Type vulnerability in Daan.Dev OMGF Pro allows Using Mali | |
CVE-2026-56290 |
critical | 10.0 | 0.3087 | 2026-06-29 | Joomlack Page Builder contains an improper access control vulnerability that could allow for remote | KEV |
CVE-2026-48276 |
critical | 10.0 | 0.0126 | 2026-06-30 | ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Unrestricted Upload of File with | |
CVE-2026-48283 |
critical | 10.0 | 0.0126 | 2026-06-30 | ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Unrestricted Upload of File with | |
CVE-2026-56291 |
critical | 10.0 | 0.1485 | 2026-07-09 | Balbooa Forms contains an unrestricted upload of file with dangerous type vulnerability that allows | KEV |
CVE-2026-57827 |
critical | 10.0 | 0.0233 | 2026-07-11 | Joomla Extension - rsjoomla.com - Unauthenticated file upload in RSFiles component < 1.17.12 - The J | |
CVE-2026-57719 |
critical | 10.0 | 0.0052 | 2026-07-13 | Unrestricted Upload of File with Dangerous Type vulnerability in CodeRevolution Aimogen Pro aimogen- | |
CVE-2026-61424 |
critical | 10.0 | 0.0044 | 2026-07-20 | Joomla Extension - dj-extensions.com - Unauthenticated arbitrary file upload in DJ-Classifieds < 3.1 | |
CVE-2026-61900 |
critical | 10.0 | 0.0044 | 2026-07-20 | Joomla Extension - dj-extensions.com - Unauthenticated arbitrary file upload in DJ-jDownloads < 4.1. | |
CVE-2026-66665 |
critical | 10.0 | 0.0052 | 2026-08-06 | Unauthenticated Arbitrary File Upload in Type Hub <= 2.0.6 versions. | |
CVE-2026-102785 |
critical | 10.0 | 0.0077 | 2026-10-22 | Joomla Extension - yootheme.com - Unauthenticated remote code execution in YOOtheme Pro 5.0.0-5.0.52 | |
CVE-2025-62047 |
critical | 9.9 | 0.0045 | 2025-11-06 | Unrestricted Upload of File with Dangerous Type vulnerability in Case-Themes Case Addons case-addons | |
CVE-2026-42748 |
critical | 9.9 | 0.0028 | 2026-05-27 | Unrestricted Upload of File with Dangerous Type vulnerability in WPify WPify Woo Czech wpify-woo all | |
CVE-2026-11839 |
critical | 9.9 | 0.0034 | 2026-06-11 | Unrestricted upload of file with dangerous type vulnerability in Başarsoft Information Technologies | |
CVE-2026-39591 |
critical | 9.9 | 0.0046 | 2026-06-15 | Subscriber Arbitrary File Upload in WP-BusinessDirectory <= 4.0.0 versions. | |
CVE-2026-40750 |
critical | 9.9 | 0.0027 | 2026-06-16 | Unrestricted Upload of File with Dangerous Type vulnerability in themagnifico52 Kids Online Store al | |
CVE-2026-22327 |
critical | 9.9 | 0.0046 | 2026-06-17 | Subscriber Arbitrary File Upload in Restaurt <= 1.0.4 versions. | |
CVE-2026-25446 |
critical | 9.9 | 0.0043 | 2026-06-17 | Subscriber Arbitrary File Upload in WishList Member X <= 3.29.0 versions. | |
CVE-2026-27041 |
critical | 9.9 | 0.0032 | 2026-06-17 | Contributor Arbitrary File Upload in Unlimited Elements for Elementor (Premium) <= 2.0.6 versions. | |
CVE-2026-39589 |
critical | 9.9 | 0.0045 | 2026-06-17 | Subscriber Arbitrary File Upload in Webenvo <= 0.0.6 versions. | |
CVE-2026-40746 |
critical | 9.9 | 0.0043 | 2026-06-17 | Subscriber Arbitrary File Upload in Restaurant Zone <= 0.7.8 versions. | |
CVE-2026-40747 |
critical | 9.9 | 0.0043 | 2026-06-17 | Subscriber Arbitrary File Upload in Ecommerce Zone <= 0.9.7 versions. | |
CVE-2026-40748 |
critical | 9.9 | 0.0043 | 2026-06-17 | Subscriber Arbitrary File Upload in Kids Gift Shop <= 0.5.4 versions. | |
CVE-2026-40749 |
critical | 9.9 | 0.0043 | 2026-06-17 | Subscriber Arbitrary File Upload in Charity Zone <= 1.1.1 versions. | |
CVE-2026-56027 |
critical | 9.9 | 0.0048 | 2026-06-26 | Customer Arbitrary File Upload in Booster for WooCommerce <= 8.0.1 versions. | |
CVE-2026-56058 |
critical | 9.9 | 0.0048 | 2026-06-26 | Subscriber Arbitrary File Upload in Quform <= 2.23.0 versions. | |
CVE-2026-56059 |
critical | 9.9 | 0.0048 | 2026-06-26 | Subscriber Arbitrary File Upload in Travel Booking <= 2.2.5 versions. | |
CVE-2026-27419 |
critical | 9.9 | 0.0048 | 2026-07-02 | Subscriber Arbitrary File Upload in Zegen <= 1.1.9 versions. | |
CVE-2026-57710 |
critical | 9.9 | 0.0048 | 2026-07-13 | Unrestricted Upload of File with Dangerous Type vulnerability in quantumcloud WoowBot Pro Max woowbo | |
CVE-2026-32463 |
critical | 9.9 | 0.0048 | 2026-08-18 | Contributor Arbitrary File Upload in Sync Post With Other Site <= 1.9.3 versions. | |
CVE-2026-32474 |
critical | 9.9 | 0.0048 | 2026-08-18 | Contributor Arbitrary File Upload in Templatiq <= 0.2.5 versions. | |
CVE-2026-66627 |
critical | 9.9 | 0.0048 | 2026-08-18 | Unrestricted Upload of File with Dangerous Type vulnerability in EDGE22 Studios Ltd. GP Premium allo | |
CVE-2026-74014 |
critical | 9.9 | 0.0048 | 2026-08-20 | Subscriber Arbitrary File Upload in IT Residence <= 3.2.1 versions. | |
CVE-2026-115188 |
critical | 9.9 | 0.0073 | 2026-10-26 | An unrestricted file upload vulnerability exists in the campaign import feature of Mautic 7. When pr | |
CVE-2024-25182 |
critical | 9.8 | 0.0039 | 2025-12-29 | givanz VvvebJs 1.7.2 suffers from a File Upload vulnerability via save.php. | |
CVE-2024-27480 |
critical | 9.8 | 0.0039 | 2025-12-29 | givanz VvvebJs 1.7.2 is vulnerable to Insecure File Upload. | |
CVE-2026-84999 |
critical | 9.8 | 0.0048 | 2026-10-28 | The Pie Register Premium plugin for WordPress is vulnerable to Unrestricted File Type Upload in all | |
CVE-2026-103688 |
critical | 9.8 | 0.0024 | 2026-10-28 | The Checkout Files Upload for WooCommerce WordPress plugin before 2.4.0 does not validate uploaded f | |
CVE-2026-109218 |
critical | 9.8 | 0.0064 | 2026-10-28 | The Contact Manager plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up t | |
CVE-2022-44276 |
critical | 9.8 | 0.0230 | 2023-06-28 | In Responsive Filemanager < 9.12.0, an attacker can bypass upload restrictions resulting in RCE. | |
CVE-2025-51511 |
critical | 9.8 | 0.0038 | 2025-12-23 | Cadmium CMS v.0.4.9 has a background arbitrary file upload vulnerability in /admin/content/filemanag | |
CVE-2026-0740 |
critical | 9.8 | 0.6290 | 2026-04-07 | The Ninja Forms - File Uploads plugin for WordPress is vulnerable to arbitrary file uploads due to m | |
CVE-2026-1555 |
critical | 9.8 | 0.0098 | 2026-04-15 | The WebStack theme for WordPress is vulnerable to arbitrary file uploads due to missing file type va | |
CVE-2026-7852 |
critical | 9.8 | 0.0036 | 2026-06-11 | Unrestricted upload of file with dangerous type vulnerability in Limatek System Inc. LimRAD NAC allo | |
CVE-2026-5524 |
critical | 9.8 | 0.0348 | 2026-07-02 | The Divi Form Builder plugin for WordPress is vulnerable to Arbitrary File Upload leading to Remote | |
CVE-2026-24014 |
critical | 9.8 | 0.0069 | 2026-07-06 | Apache IoTDB DataNode’s internal RPC interface for creating Trigger instances uses the uploaded Trig |