themagnifico52 vulnerabilities and threats

CVE-2026-74018 is a critical vulnerability in themagnifico52's Warehouse Cargo product that allows subscriber-level users to upload arbitrary files without restriction on file type. This issue affects versions up to and including 2.6.9. The vulnerability can lead to complete system compromise due to its high impact on confidentiality, integrity, and availability.

CVE-2026-74016 is a critical vulnerability in themagnifico52 Smart Cleaning versions up to 4.8.6 that allows arbitrary file upload due to unrestricted upload of files with dangerous types. This flaw can lead to complete compromise of confidentiality, integrity, and availability of the affected system.

Subscriber Arbitrary File Upload in Charity Zone <= 1.1.1 versions.

CVE-2026-40748 is a critical vulnerability in themagnifico52 Kids Gift Shop versions up to 0.5.4 that allows subscribers to upload arbitrary files without restriction on file type. This unrestricted file upload can lead to severe consequences including full system compromise. The vulnerability is classified under CWE-434, indicating unsafe handling of file uploads. No official patch or remediation has been confirmed yet.

Subscriber Arbitrary File Upload in Ecommerce Zone <= 0.9.7 versions.

CVE-2026-40746 is a critical vulnerability in themagnifico52's Restaurant Zone product, versions up to and including 0.7.8. It allows subscribers to upload arbitrary files without restriction on file type, which can lead to severe consequences including full system compromise. The vulnerability is classified under CWE-434, indicating unrestricted file upload of dangerous types. No official patch or remediation has been confirmed yet.

Unrestricted Upload of File with Dangerous Type vulnerability in themagnifico52 Kids Online Store allows Upload a Web Shell to a Web Server. This issue affects Kids Online Store: from n/a through 0.8.9.