CVE-2026-84738

Kritik

Teknik Veri (Otomatik)

CVSS Skoru: 9.1
EPSS: 0.2%
CWE: CWE-94
KEV Durumu: Hayır

Yayım tarihi: 18 Eylül 2026

The AF Companion WordPress plugin before 2.2.0 does not validate the type of files uploaded through one of its import features, allowing users with a low-privileged store-management role to upload arbitrary files, including PHP ones, leading to Remote Code Execution.

Referanslar

https://wpscan.com/vulnerability/1d6c7f60-570e-4729-a2d5-463e0b62942e/

NVD kaydı ↗CVE.org ↗

Bu CVE için henüz editoryal inceleme yapılmadı. Sadece otomatik teknik veri gösteriliyor.