10.0
Critique
CVE-2026-14560 The teddy-bear-customize-addon WordPress plugin through 1.0.5 does not properly validate uploaded files, relying on a…
Description
The teddy-bear-customize-addon WordPress plugin through 1.0.5 does not properly validate uploaded files, relying on a client-supplied content type and preserving the original filename, allowing unauthenticated attackers to upload arbitrary PHP files and execute code on the server.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| teddy-bear-customize-addon 1.0 | premières → 1.0.5 | Pas de correctif indiqué |