Threats tagged 'ghsa-3m7x-5c7v-q57x'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.8	EPSS 0.8%	CVE-2026-81402The DS Ad Rotator WordPress plugin through 0.8 does not perform any capability check, nonce verification, or file-type validation on its image upload handler, allowing unauthenticated attackers to upload arbitrary files, including PHP, to a web-accessible directory, which can lead to remote code execution Critical9.8EPSS 0.8%2026-09-12GCVE DatabaseCVE-2026-81402 The DS Ad Rotator WordPress plugin through 0.8 does not perform any capability check, nonce verification, or file-type validation on its image upload handler, allowing unauthenticated attackers to upload arbitrary files, including PHP, to a web-accessible directory, which can lead to remote code execution. EPSS 0.8%Report on CVE-2026-81402 Vulnerability CWE-434 #ghsa-3m7x-5c7v-q57x	GCVE Database	2026-09-12

Page 1 of 1