CVE-2026-125055 - Arbitrary File Upload Vulnerability in Chatterbug Forms
The vulnerability allows unauthenticated attackers to upload executable files.
// category
WordPress Security
Opinion, technical notes and research on web development, servers, performance and cyber security.
CVE-2026-119077: Critical Vulnerability in ELEX WordPress HelpDesk Plugin
The ELEX WordPress HelpDesk plugin has a critical vulnerability allowing unauthorized code execution.
CVE-2026-126119 - Critical Vulnerability in Streamit WordPress Plugin
The Streamit WordPress plugin has a critical vulnerability that allows remote code execution.
CVE-2026-124833: Critical Vulnerability in Ahime Image Printer Plugin for WordPress
The vulnerability allows arbitrary file uploads, including PHP, without validation.
CVE-2026-124822 - Critical Vulnerability in Easy DragDrop File Uploader for WordPress
The vulnerability allows unauthenticated users to delete arbitrary files on the server.
CVE-2026-124763: Critical Vulnerability in Woocommerce Wishlist Plugin for WordPress
A critical vulnerability in the Woocommerce Wishlist plugin allows unauthenticated users to change site options.
CVE-2026-118064: Critical Vulnerability in Advance Guest Post WordPress Plugin
A critical vulnerability allows unauthenticated users to upload malicious PHP files.
CVE-2026-118063: Critical Vulnerability in Advance Guest Post WordPress Plugin
The vulnerability allows unauthenticated users to upload arbitrary files, including PHP, leading to potential remote code…
CVE-2026-89324: Authentication Bypass Vulnerability in Basel Post Types Plugin for WordPress
A critical vulnerability in the Basel Post Types plugin allows authentication bypass in WordPress.