CVE-2026-82187

9.8 Critique

Publiée le 21/09/2026 à 09:16 · Modifiée le 21/09/2026 à 17:17 · Analyse NVD reportée · Source : contact@wpscan.com

Description

The Web to Print Online Designer WordPress plugin before 2.15.0 does not validate the type or extension of uploaded files, and hands the token protecting those uploads to any visitor who asks for it, allowing unauthenticated attackers to upload arbitrary files, including PHP ones, and run code on the server.

Traduire en français

Produits concernés

Unknown Web to Print Online Designer

Scores CVSS

Version	Score	Source	Vecteur
3.1	9.8 Critique	134c704f-9b21-4f2e-91b3-4a467353bcc0	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`

Faiblesses (CWE)

CWE-434

Références

https://wpscan.com/vulnerability/d3e49486-6c08-41d5-86c9-3aaff670fc63/

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories