CVE-2026-16618 in Improve SEO Plugin
सारांश
द्वारा MITRE • 04/08/2026
The Improve SEO WordPress plugin through 2.0.11 does not properly validate uploaded files, checking only the file content type while writing the file with the attacker-supplied extension into a publicly accessible directory, allowing unauthenticated users to upload executable PHP files and achieve remote code execution.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.