https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-56704.htmlhttps://patchthecve.com/cve/CVE-2025-56704.htmlWed, 14 Oct 2026 21:10:00 +0000HIGH 8.8: LeptonCMS version 7.3.0 contains an arbitrary file upload vulnerability, which is caused by the lack of proper validation for uploaded files. An authenticated attacker can exploit this vulnerability by uploading a specially crafted ZIP/PHP file to execute arbitrary code.https://patchthecve.com/cve/CVE-2024-29514.htmlhttps://patchthecve.com/cve/CVE-2024-29514.htmlWed, 17 Jun 2026 07:22:54 +0000HIGH 8.8: File Upload vulnerability in lepton v.7.1.0 allows a remote authenticated attackers to execute arbitrary code via uploading a crafted PHP file.https://patchthecve.com/cve/CVE-2024-29515.htmlhttps://patchthecve.com/cve/CVE-2024-29515.htmlWed, 17 Jun 2026 07:22:54 +0000HIGH 8.8: File Upload vulnerability in lepton v.7.1.0 allows a remote authenticated attackers to execute arbitrary code via uploading a crafted PHP file to the save.php and config.php component.https://patchthecve.com/cve/CVE-2024-24520.htmlhttps://patchthecve.com/cve/CVE-2024-24520.htmlThu, 09 Jul 2026 01:18:54 +0000HIGH 7.8: An issue in Lepton CMS v.7.0.0 allows a local attacker to execute arbitrary code via the upgrade.php file in the languages place.https://patchthecve.com/cve/CVE-2024-24399.htmlhttps://patchthecve.com/cve/CVE-2024-24399.htmlWed, 17 Jun 2026 07:14:25 +0000HIGH 7.2: An arbitrary file upload vulnerability in LEPTON v7.0.0 allows authenticated attackers to execute arbitrary PHP code by uploading this code to the backend/languages/index.php languages area.