CVE-2026-9815
2026-06-18
06h00 +00:00
06h00 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
CVE 描述
MagicForm <= 0.1.3 - Unauthenticated Arbitrary File Upload to RCE
The MagicForm WordPress plugin through 0.1.3 does not properly validate the type of files uploaded through an unauthenticated AJAX action when a form's per-field extension allowlist is left empty, allowing unauthenticated attackers to upload PHP files and execute arbitrary code on the server.CVE 資訊
參考資料
https://wpscan.com/vulnerability/043f449f-fc65-4218-83d2-7742e62f2af3/
Tags : exploit, vdb-entry, technical-description
Tags : exploit, vdb-entry, technical-description
