Aller au contenu
Se connecter
8.6 Élevée

CVE-2026-107508 The Ultimate Multisite WordPress plugin before 2.17.2 does not validate a user-supplied value used to select a file…

Description

The Ultimate Multisite WordPress plugin before 2.17.2 does not validate a user-supplied value used to select a file to include, allowing unauthenticated attackers to include and read arbitrary local files, including the WordPress configuration file.

Produits et versions touchés

Produit Versions touchées Corrigé en
Ultimate Multisite 2.17 premières → < 2.17.2 2.17.2

Autres CVE de Ultimate Multisite

Les 2 CVE de Ultimate Multisite →
CVE-2026-103646 The Ultimate Multisite WordPress plugin before 2.17.0 does not require authentication before a logged-out checkout is… 9.8 Critique
Suivre cette CVE