Threats Tagged 'ghsa-4qpc-6xpr-g8g2'
View all threats tagged with 'ghsa-4qpc-6xpr-g8g2'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'ghsa-4qpc-6xpr-g8g2'
Click on any threat for detailed analysis and mitigation recommendations
The Shared Files WordPress plugin versions before 1.7.67 and shared-files-pro before 1.7.70 have a missing authorization vulnerability in their file-upload handler. This handler is accessible to unauthenticated users and only protected by a nonce exposed on public pages, allowing unauthenticated visitors to upload files to a publicly accessible directory and to read the server's absolute path from the response. The uploads are restricted to WordPress's allowed MIME types, preventing executable PHP files from being uploaded. Join the discussion | CVE Database V5 | 08/28/2026, 06:00:15 UTC Added: 08/28/2026, 07:37:53 UTC |
Showing 1 to 1 of 1 result