Threats tagged 'ghsa-qp64-vw92-jr32'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.5	EPSS 0.4%	CVE-2026-18946The Contact Form to Any API WordPress plugin before 3.0.7 does not use a random filename when copying files uploaded High7.5EPSS 0.4%2026-08-10GCVE DatabaseCVE-2026-18946 The Contact Form to Any API WordPress plugin versions before 3.0.7 do not use random filenames when copying uploaded files to a publicly accessible directory. This allows unauthenticated attackers to enumerate and download files submitted by other users through contact forms. EPSS 0.4%Report on CVE-2026-18946 Vulnerability CWE-200 #ghsa-qp64-vw92-jr32	GCVE Database	2026-08-10

Page 1 of 1