CVE-2026-14560

The teddy-bear-customize-addon WordPress plugin versions up to 1.0.5 is vulnerable due to improper validation of uploaded files, enabling unauthenticated attackers to upload and execute arbitrary PHP code on the server. This critical vulnerability poses a severe risk to WordPress sites using this plugin, making it imperative for administrators to prioritize immediate patching or removal of the affected plugin to prevent potential exploitation.