← Back to Dashboard

CVE-2026-14560

CRITICAL NVD
CVSS Score
10.0
Severity
CRITICAL
Source
NVD
Published
Sep 11, 2026
Description

The teddy-bear-customize-addon WordPress plugin through 1.0.5 does not properly validate uploaded files, relying on a client-supplied content type and preserving the original filename, allowing unauthenticated attackers to upload arbitrary PHP files and execute code on the server.

View Full Details ← Back