indithemes vulnerabilities and threats

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.9	EPSS 0.5%	CVE-2026-74014IT Residence (WordPress plugin) · Unrestricted File Upload Critical9.9EPSS 0.5%2026-08-20CVE Database V5CVE-2026-74014 CVE-2026-74014 is a critical vulnerability in indithemes IT Residence versions up to 3.2.1 that allows subscribers to upload arbitrary files without proper restrictions on file types. This unrestricted file upload flaw can lead to severe consequences including full system compromise. EPSS 0.5%Vulnerability indithemes CWE-434 #ghsa-6px3-6pv7-rjgj	CVE Database V5	2026-08-20

Page 1 of 1