Threats Tagged 'cve-2026-58480'
View all threats tagged with 'cve-2026-58480'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-58480'
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-58480: Unrestricted Upload of File with Dangerous Type in Creative Themes Blocksy CompanionCVE-2026-58480 0 Blocksy Companion Pro plugin for WordPress before 2.1.47 contains an unauthenticated arbitrary file upload vulnerability that allows attackers to upload executable files by bypassing extension validation in the save_attachments function exposed through the Advanced Reviews feature. Attackers can exploit the Custom Fonts extension's flawed strpos() substring check by uploading double-extension filenames such as shell.woff2.php, causing the validation to pass on the substring match while the web server executes the file as PHP, achieving remote code execution. Join the discussion | CVE Database V5 | 07/08/2026, 13:05:02 UTC Added: 07/08/2026, 13:29:45 UTC |
Showing 1 to 1 of 1 result