Threats tagged 'ghsa-r4mq-7p9v-x8fv'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.8	EPSS 0.8%	CVE-2026-16250Personal QR Message (WordPress plugin) · Unrestricted File Upload Critical9.8EPSS 0.8%2026-08-03CVE Database V5CVE-2026-16250 The Personal QR Message WordPress plugin through 1.0 does not restrict the file types that can be uploaded through an unauthenticated handler, allowing unauthenticated users to upload arbitrary executable PHP files that are directly reachable, leading to remote code execution. EPSS 0.8%Vulnerability CWE-434 #ghsa-r4mq-7p9v-x8fv	CVE Database V5	2026-08-03

Page 1 of 1