cve.bz

CWE-434: Unrestricted Upload of File with Dangerous Type, page 10

Filter

The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

What the weakness is: CWE-434 at MITRE

Related attack patterns (CAPEC): 1
  • CAPEC-1 Accessing Functionality Not Properly Constrained by ACLs Likelihood: High · Severity: High

The attack patterns MITRE's CAPEC relates to CWE-434, as MITRE names them. Credits.

Ask an AI about CWE-434

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-434: Unrestricted Upload of File with Dangerous Type and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/434.html and https://cve.bz/cve/cwe/434?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 5.4CVE-2026-53948EPSS 0.2%

    Ghost is a Node.js content management system. From 6.19.4 until 6.21.1, insufficient validation of the client-supplied Content-Type on Ghost's Admin API file upload endpoint allowed uploaded files to be served from the site with an attacke…

  2. 10.0CVE-2026-48939KEVExploitEPSS 20%

    A vulnerability in the iCagenda extension for Joomla allows the upload of arbitrary files in the file attachment feature, ultimately resulting in PHP code upload and execution.

  3. 10.0CVE-2026-48908KEVExploitEPSS 89%

    A vulnerability in SP Page Builder for Joomla allows unauthenticated users to upload arbitrary files, ultimately resulting in the upload and execution of PHP code.

  4. 8.7CVE-2019-25758EPSS 1.0%

    Joomla! Component vBizz 1.0.7 contains an unrestricted file upload vulnerability that allows authenticated attackers to upload arbitrary PHP files by submitting malicious files through the profile_pic parameter. Attackers can upload PHP fi…

  5. 9.3CVE-2026-54414EPSS 0.7%

    FileRise before 3.16.0 is vulnerable to path traversal in the shared-folder upload endpoint (/api/folder/uploadToSharedFolder.php), leading to arbitrary file write and administrator account takeover. The upload filename is validated by Fol…

  6. 8.8CVE-2026-9860EPSS 0.6%

    The Offload, AI & Optimize with Cloudflare Images plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.10.2 via the 'account-id' parameter parameter. This is due to insufficient privilege enfo…

  7. 9.0CVE-2026-52705EPSS 0.3%

    Unauthenticated Arbitrary File Upload in SigmaForms Pro – AI Generated Forms <= 1.4.5 versions.

  8. 9.9CVE-2026-40749EPSS 0.4%

    Subscriber Arbitrary File Upload in Charity Zone <= 1.1.1 versions.

  9. 9.9CVE-2026-40748EPSS 0.4%

    Subscriber Arbitrary File Upload in Kids Gift Shop <= 0.5.4 versions.

  10. 9.9CVE-2026-40747EPSS 0.4%

    Subscriber Arbitrary File Upload in Ecommerce Zone <= 0.9.7 versions.

  11. 9.9CVE-2026-40746EPSS 0.4%

    Subscriber Arbitrary File Upload in Restaurant Zone <= 0.7.8 versions.

  12. 8.0CVE-2026-39598EPSS 0.2%

    Unrestricted Upload of File with Dangerous Type vulnerability in Kodezen LLC Academy LMS Pro allows Upload a Web Shell to a Web Server. This issue affects Academy LMS Pro: from n/a before 3.5.2.

  13. 9.9CVE-2026-39589EPSS 0.4%

    Subscriber Arbitrary File Upload in Webenvo <= 0.0.6 versions.

  14. 9.9CVE-2026-27041EPSS 0.3%

    Contributor Arbitrary File Upload in Unlimited Elements for Elementor (Premium) <= 2.0.6 versions.

  15. 9.9CVE-2026-25446EPSS 0.4%

    Subscriber Arbitrary File Upload in WishList Member X <= 3.29.0 versions.

  16. 9.9CVE-2026-22327EPSS 0.5%

    Subscriber Arbitrary File Upload in Restaurt <= 1.0.4 versions.

  17. 10.0CVE-2025-69129EPSS 0.4%

    Unauthenticated Arbitrary File Upload in WordPress & WooCommerce Scraper Plugin, Import Data from Any Site <= 1.0.7 versions.

  18. 9.9CVE-2025-60218EPSS 0.4%

    Subscriber Arbitrary File Upload in PT Luxa Addons <= 1.2.2 versions.

  19. 9.8CVE-2025-59872EPSS 0.5%

    HCL ZIE for Web is affetced by an Unrestricted File Upload vulnerability, If the server is configured to execute code, then it may be possible to obtain command execution on the server by uploading a file known as a web shell, which allows…

  20. 9.9CVE-2024-52488EPSS 0.5%

    Subscriber Arbitrary File Upload in Grip <= 1.0.9 versions.

  21. 9.9CVE-2026-40750EPSS 0.3%

    Unrestricted Upload of File with Dangerous Type vulnerability in themagnifico52 Kids Online Store allows Upload a Web Shell to a Web Server. This issue affects Kids Online Store: from n/a through 0.8.9.

  22. 8.8CVE-2026-6933EPSS 0.8%

    The Premmerce Dev Tools plugin for WordPress is vulnerable to Remote Code Execution via missing authorization in versions up to and including 2.0. This is due to the 'generatePluginHandler' function lacking any authorization check before p…

  23. 10.0CVE-2026-40772EPSS 0.4%

    Unauthenticated Arbitrary File Upload in GeekyBot <= 1.2.2 versions.

  24. 9.9CVE-2026-39591EPSS 0.5%

    Subscriber Arbitrary File Upload in WP-BusinessDirectory <= 4.0.0 versions.

  25. 5.4CVE-2026-39527EPSS 0.3%

    Subscriber Arbitrary File Upload in WpStream < 4.11.2 versions.

  26. 9.8CVE-2026-50873EPSS 0.4%

    An arbitrary file upload vulnerability in the attachment handling component of flatnotes v5.5.4 allows attackers to execute arbitrary code via uploading a crafted HTML or SVG file.

  27. 9.3CVE-2018-25436EPSS 0.7%

    WordPress Plugin Baggage Freight Shipping Australia 0.1.0 contains an unrestricted file upload vulnerability that allows unauthenticated attackers to upload arbitrary files by exploiting the upload-package.php endpoint. Attackers can submi…

  28. 9.3CVE-2026-5482EPSS 0.4%

    Responsive FileManager's allows an unauthenticated attacker to upload files of any type and extension without restriction using dialog.php endpoint, leading to Remote Code Execution.  This project is unmaintained at the time of CVE assign…

  29. 5.3CVE-2026-34027EPSS 0.3%

    The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, contains insufficient server-side file type validation in the /safe/contract/uploadcustomdocuments endpoint. The application validates uploaded files based on the user-…

  30. 2.1CVE-2026-53724EPSS 0.3%

    Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.79 and 9.9.1-alpha.4, the default file upload extension blocklist can be bypassed by appending a trailing dot to …

  31. 8.7CVE-2026-6211EPSS 0.2%

    Unrestricted upload of file with dangerous type vulnerability in Global IT Informatics Services Inc. WEOLL allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects WEOLL: from 2.0.9 before 3.2.45.33.

  32. 9.3CVE-2026-53787ExploitEPSS 5.6%

    Amasty Order Attributes for Magento 2 before version 4.0.0 contains an unauthenticated arbitrary file upload vulnerability that allows unauthenticated attackers to write arbitrary files to the store's media directory by submitting files of…

  33. 8.1CVE-2026-46489EPSS 0.3%

    SolidInvoice is an open-source invoicing platform. Prior to version 2.3.17, the company logo upload feature accepts any file type without validation. An authenticated administrator can upload an SVG file containing embedded JavaScript. Thi…

  34. 9.9CVE-2026-11839EPSS 0.3%

    Unrestricted upload of file with dangerous type vulnerability in Başarsoft Information Technologies Inc. Rotaban allows Upload a Web Shell to a Web Server. This issue affects Rotaban: from V2026.06.002 before V2026.06.003.

  35. 9.8CVE-2026-7852EPSS 0.4%

    Unrestricted upload of file with dangerous type vulnerability in Limatek System Inc. LimRAD NAC allows Remote Code Inclusion. This issue affects LimRAD NAC: before 5.5.7.3.9.

  36. 9.1CVE-2026-9067EPSS 0.6%

    The Schema & Structured Data for WP & AMP WordPress plugin before 1.60 does not check user capabilities on its frontend AJAX file-upload handlers and does not validate the actual content of uploaded files against the endpoint's intended me…

  37. 5.4CVE-2026-36722EPSS 0.2%

    An authenticated arbitrary file upload vulnerability in the /api/create-car-image component of bookcars v8.3 allows attackers to execute arbitrary code via uploading a crafted file.

  38. 6.9CVE-2025-40808EPSS 0.2%

    A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions), SIPROTEC 5 6MD85 (CP200) (All versions), SIPROTEC 5 6MD85 (CP300) (All versions), SIPROTEC 5 6MD86 (CP200) (All versions), SIPROTEC 5 6MD86 (CP300) (All versio…

  39. 6.5CVE-2026-34031EPSS 0.4%

    Unrestricted Upload of File with Dangerous Type vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. The server did not sufficiently validate user-supplied image URLs, allowing arbitrary external content to be…

  40. 6.5CVE-2026-33582EPSS 0.5%

    Unrestricted Upload of File with Dangerous Type vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. A crafted TIFF image could trigger excessive memory allocation during image decoding, allowing an authentica…

  41. 2.0CVE-2026-11621EPSS 0.2%

    A weakness has been identified in Dcat-Admin up to 2.2.3-beta. This impacts the function editorMDUpload of the file /admin/dcat-api/editor-md/upload of the component User Setting Page. This manipulation of the argument editormd-image-file …

  42. 9.3CVE-2024-58349EPSS 0.7%

    WordPress Theme Travelscape 1.0.3 contains an arbitrary file upload vulnerability that allows unauthenticated attackers to upload malicious files by exploiting insufficient validation in the theme's upload functionality. Attackers can uplo…

  43. 9.3CVE-2024-58348EPSS 0.8%

    WordPress Background Image Cropper version 1.2 contains a remote code execution vulnerability that allows unauthenticated attackers to upload arbitrary files by accessing the ups.php endpoint. Attackers can upload PHP files through the fil…

  44. 5.5CVE-2026-11474EPSS 0.3%

    A security flaw has been discovered in Kushan2k student-management-system up to f16a4ceaddd6729c4b306ed4641cda3176c1ef2a. Affected is an unknown function of the file service/RegisterService.php of the component Registration Endpoint. Perfo…

  45. 7.2CVE-2026-7537EPSS 0.7%

    The MDJM Event Management plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.7.8.3 via the mdjm_send_comm_email function. This is due to no file type, extension, or MIME type validation bein…

  46. 8.7CVE-2026-46400EPSS 0.4%

    HAX CMS helps manage microsite universe with PHP or NodeJs backends. Starting in version 11.0.6 and prior to version 25.0.0, the file upload functionality in HAXCMS PHP only validates file extensions using a regex pattern without checking …

  47. 9.4CVE-2026-11419EPSS 0.5%

    A path traversal vulnerability exists in the Altium Enterprise Server Vault Service UploadController due to improper validation of a user-controlled path component in image upload requests. An authenticated user can supply a crafted absolu…

  48. 8.8CVE-2026-5411EPSS 0.6%

    The WP Captcha PRO (the premium version of the Advanced Google reCAPTCHA plugin, both have the same slug) plugin for WordPress is vulnerable to arbitrary file upload in all versions up to, and including, 5.38. This is due to a capability c…

  49. 8.7CVE-2026-46392EPSS 0.3%

    HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prior to version 26.0.0 of HAX CMS PHP, the `saveFile` endpoint validates upload extensions case-insensitively and writes the filename to disk verbatim, but the `.htacces…

  50. 5.5CVE-2026-11344EPSS 0.4%

    A vulnerability was found in code-projects Vehicle Management System 1.0. This impacts an unknown function of the file newdriver.php of the component New Driver Registration Form. Performing a manipulation of the argument photo results in …