Beveiligingsadvies

CVE-2026-15039

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-08-12 06:00:13

Laatst bijgewerkt 2026-08-12 19:39:17

Toegewezen door WPScan

CVSS-score 9.8

Status PUBLISHED

Beschrijving

The giftware WordPress plugin before 4.2.10 does not validate the type of uploaded files in one of its upload paths, allowing unauthenticated users to upload arbitrary files, including PHP code, which can lead to remote code execution.

← Alle CVE's bekijken Bekijk op cve.org ↗