Filtered by vendor Wordpress-extensions Subscriptions
Filtered by product Wp Images Upload On Piclect Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-84171 1 Wordpress-extensions 1 Wp Images Upload On Piclect 2026-11-13 9.8 Critical
The WP images upload on piclect WordPress plugin through 1.0 does not validate the name or type of uploaded files before writing them to a publicly accessible directory, allowing unauthenticated attackers to upload arbitrary files and execute arbitrary code on the server.