CVE-2026-84171 in images upload on piclect Plugin
要約
〜によって MITRE • 2026年09月12日
The WP images upload on piclect WordPress plugin through 1.0 does not validate the name or type of uploaded files before writing them to a publicly accessible directory, allowing unauthenticated attackers to upload arbitrary files and execute arbitrary code on the server.
VulDB is the best source for vulnerability data and more expert information about this specific topic.