← Back to Dashboard

CVE-2026-85573

HIGH NVD
CVSS Score
8.8
Severity
HIGH
Source
NVD
Published
Sep 30, 2026
Description

The All in One Files Upload WordPress plugin before 2.0.17 adds SVG to the site's allowed upload types and does not sanitise uploaded files or verify the authenticity of its public upload requests, allowing unauthenticated users to store files containing active content which run in the site's origin when a victim opens them.

View Full Details ← Back