Direct naar de inhoud
⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →
cybernieuws.nl Cybersecurity en informatiebeveiling nieuws alerts live · net nu 165 bronnen 1 kritiek 16 vandaag
CVE's Videos Dagbriefing

← Terug naar CVE-database

CVE-2026-1555

CRITICAL · 9.8 CVSS Gepubliceerd: CWE-434

Beschrijving

The WebStack theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the io_img_upload() function in all versions up to, and including, 1.2024. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.

References