Threats tagged 'ghsa-c54q-hhx6-vc6r'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.8	EPSS 0.3%	CVE-2026-85573One Files Upload WordPress plugin · All High8.8EPSS 0.3%2026-09-30GCVE DatabaseCVE-2026-85573 The All in One Files Upload WordPress plugin versions before 2.0.17 improperly add SVG files to allowed upload types without sanitizing the content or verifying upload request authenticity. This flaw permits unauthenticated users to upload files containing active content that executes in the site's origin when accessed by victims. EPSS 0.3%Report on CVE-2026-85573 Vulnerability CWE-79 #ghsa-c54q-hhx6-vc6r	GCVE Database	2026-09-30

Page 1 of 1