← Back to Dashboard

CVE-2026-81402

CRITICAL NVD
CVSS Score
9.8
Severity
CRITICAL
Source
NVD
Published
Sep 12, 2026
Description

The DS Ad Rotator WordPress plugin through 0.8 does not perform any capability check, nonce verification, or file-type validation on its image upload handler, allowing unauthenticated attackers to upload arbitrary files, including PHP, to a web-accessible directory, which can lead to remote code execution.

View Full Details ← Back