Threats Tagged 'cve-2026-18933'
View all threats tagged with 'cve-2026-18933'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-18933'
Click on any threat for detailed analysis and mitigation recommendations
The wp-downloadmanager WordPress plugin, in version 1.68.11 (also affecting the 6.9.4 release line), allows an admin-privileged user… (CVE-2026-18933)CVE-2026-18933 0 The wp-downloadmanager WordPress plugin version 1.68.11 (and the 6.9.4 release line) contains a vulnerability that allows an admin-privileged user to upload arbitrary files without any file type or extension validation. The upload handler lacks checks for file type, extension, and directory traversal, enabling an attacker to place executable PHP files in a web-accessible directory, leading to remote code execution. Subsequent plugin versions 1.69 and 1.69.1 introduced file-type validation and directory traversal protections, respectively. Join the discussion | GCVE Database | 08/05/2026, 12:31:33 UTC Added: 08/05/2026, 15:31:20 UTC |
Showing 1 to 1 of 1 result