Aller au contenu
Se connecter
8.1 Élevée

CVE-2026-14553 The zportals WordPress plugin before 6.3.4 does not properly validate uploaded files, trusting the client-supplied…

Description

The zportals WordPress plugin before 6.3.4 does not properly validate uploaded files, trusting the client-supplied content type and preserving the original file extension, allowing any authenticated user (Subscriber or higher) to upload arbitrary PHP files and achieve remote code execution.

Produits et versions touchés

Produit Versions touchées Corrigé en
zportals 6.3 premières → < 6.3.4 6.3.4

Autres CVE de zportals

Les 3 CVE de zportals →
CVE-2026-18365 The zportals WordPress plugin before 6.4.2 does not perform any capability or nonce check on one of its AJAX actions,… 4.3 Moyenne CVE-2026-18364 The zportals WordPress plugin before 6.4.2 does not perform any capability or nonce check on several of its AJAX… 4.3 Moyenne
Suivre cette CVE