CVE-2026-75873

Kritik

Teknik Veri (Otomatik)

CVSS Skoru: 9.8
EPSS: —
CWE: CWE-434
KEV Durumu: Hayır

Yayım tarihi: 30 Eylül 2026

The Zella Theme WordPress theme before 2.6.3 does not perform any capability or nonce check on one of its font upload actions, which is available to unauthenticated users, allowing them to upload arbitrary files, including PHP ones, and achieve remote code execution.

Referanslar

https://wpscan.com/vulnerability/15b8a6cb-f89c-4d4d-9812-441e822c647f/

NVD kaydı ↗CVE.org ↗

Bu CVE için henüz editoryal inceleme yapılmadı. Sadece otomatik teknik veri gösteriliyor.