CyberRota
← Ana sayfaya dön

CVE-2026-12968

HIGH · CVSS 8.8 EPSS %0.17

Kaynak: NVD + CISA KEV + EPSS · Yayınlanma: 2026-07-22T07:16:34.710 · Çekilme zamanı: 2026-07-23T06:10:49.842179+00:00

CyberRota Yorumu

Detaylı analiz gerekiyor.

CVE
CVE-2026-12968
Severity
HIGH
CVSS
8.8
EPSS
%0.17
WordPress

Orijinal NVD Açıklaması

The Product Addons and Product Options With Custom Fields WordPress plugin before 1.6.15 does not restrict an unauthenticated file-upload endpoint and accepts SVG files that are stored and served inline, allowing an unauthenticated attacker to upload a malicious SVG whose embedded script executes in the session of any user (such as an administrator) who later opens the file.