# file_upload


- [CVE-2026-56291](https://insights.sbomify.com/CVE-2026-56291/): Balbooa Forms Unrestricted Upload of File with Dangerous Type (critical 10.0, exploited in the wild)
- [CVE-2026-56290](https://insights.sbomify.com/CVE-2026-56290/): Joomlack Page Builder Improper Access Control (critical 10.0, exploited in the wild)
- [CVE-2026-48908](https://insights.sbomify.com/CVE-2026-48908/): JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type (critical 10.0, exploited in the wild)
- [CVE-2026-48939](https://insights.sbomify.com/CVE-2026-48939/): iCagenda Unrestricted Upload of File with Dangerous Type (critical 10.0, exploited in the wild)
- [CVE-2026-48907](https://insights.sbomify.com/CVE-2026-48907/): Widget Factory Joomla Content Editor Improper Access Control (critical 10.0, exploited in the wild)
- [CVE-2025-52691](https://insights.sbomify.com/CVE-2025-52691/): SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type (critical 10.0, exploited in the wild)
- [CVE-2020-25213](https://insights.sbomify.com/CVE-2020-25213/): WordPress File Manager Plugin Remote Code Execution (critical 10.0, exploited in the wild)
- [CVE-2024-57968](https://insights.sbomify.com/CVE-2024-57968/): Advantive VeraCore Unrestricted File Upload (critical 9.9, exploited in the wild)
- [CVE-2021-38163](https://insights.sbomify.com/CVE-2021-38163/): SAP NetWeaver Unrestricted File Upload (critical 9.9, exploited in the wild)
- [CVE-2024-50623](https://insights.sbomify.com/CVE-2024-50623/): Cleo Multiple Products Unrestricted File Upload (critical 9.8, exploited in the wild)
- [CVE-2022-29464](https://insights.sbomify.com/CVE-2022-29464/): WSO2 Multiple Products Unrestrictive Upload of File (critical 9.8, exploited in the wild)
- [CVE-2022-26871](https://insights.sbomify.com/CVE-2022-26871/): Trend Micro Apex Central Arbitrary File Upload (critical 9.8, exploited in the wild)

---
From sbomify Insights: https://insights.sbomify.com/types/file-upload/