CVE-2026-84171 in images upload on piclect Plugininformación

Resumen

por MITRE • 2026-09-12

The WP images upload on piclect WordPress plugin through 1.0 does not validate the name or type of uploaded files before writing them to a publicly accessible directory, allowing unauthenticated attackers to upload arbitrary files and execute arbitrary code on the server.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsable

WPScan

Reservar

2026-09-01

Divulgación

2026-09-12

Moderación

aceptado

Artículo

VDB-403052

CPE

listo

EPSS

0.00000

KEV

no

Actividades

muy bajo

Sector

Hostingprovider

Fuentes

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-84171
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-84171
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-84171/

◂ AnteriorVisión De ConjuntoPróximo ▸

Interested in the pricing of exploits?

See the underground prices here!