tpAdmin vulnerabilities

2 known vulnerabilities in tpAdmin from Yuan1994. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  tpadmin: Unrestricted Upload of File with Dangerous Type

  CVE-2026-2113Feb 7, 2026Yuan1994EPSS 2.43%

  A security vulnerability has been detected in yuan1994 tpadmin up to 1.3.12. This affects an unknown part in the library /public/static/admin/lib/webuploader/0.1.5/server/preview.php of the component WebUploader. The manipulation leads to deserialization. The

• 7.2 High severity

  tpAdmin: Unrestricted Upload of File with Dangerous Type

  CVE-2023-1970Apr 10, 2023Yuan1994EPSS 1.01%

  ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as problematic, has been found in yuan1994 tpAdmin 1.3.12. This issue affects the function Upload of the file application\admin\controller\Upload.php. The manipulation of the argument file l