Threat database

1 threat

Threat database
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.8	EPSS 1.0%	CVE-2026-104800AGE-GATE · Unrestricted Upload of File with Dangerous Type Critical9.8EPSS 1.0%2026-10-14CVE Database V5CVE-2026-104800 The AGE-GATE WordPress plugin (versions up to and including 1.0) contains a critical remote code execution vulnerability due to an unauthenticated admin.php endpoint that lacks WordPress loading and security checks. This allows attackers to inject unsanitized POST parameters into PHP source code, enabling code execution on the server without authentication. EPSS 1.0%Vulnerability streetforce1 #cwe-434	CVE Database V5	2026-10-14

Showing 1–1 of 1 result