Beveiligingsadvies

CVE-2026-15302

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-10 04:31:20

Laatst bijgewerkt 2026-07-14 01:33:22

Toegewezen door Wordfence

CVSS-score 5.3

Status PUBLISHED

Beschrijving

The ARMember plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 4.0.27 via the 'X-FILENAME' HTTP header. This makes it possible for unauthenticated attackers to upload and overwrite certain files (e.g., CSS) to directories outside the 'wp-content/uploads/armember' directory.

← Alle CVE's bekijken Bekijk op cve.org ↗