CVE-2026-1306

🗓️ 14 Feb 2026 06:42:34Reported by WordfenceType

cve🔗 web.nvd.nist.gov👁 41 Views🌐 WEB

CVE-2026-1306: midi-Synth plugin allows unauthenticated uploads via export action to 1.1.0; nonce exposed may enable remote code execution.

Reporter	Title	Published	Views	Family All 12
GithubExploit	Exploit for CVE-2026-1306	28 Apr 202616:27	–	githubexploit
ATTACKERKB	CVE-2026-1306	14 Feb 202606:42	–	attackerkb
Circl	CVE-2026-1306	14 Feb 202607:30	–	circl
CNNVD	WordPress plugin midi-Synth 代码问题漏洞	14 Feb 202600:00	–	cnnvd
Cvelist	CVE-2026-1306 midi-Synth <= 1.1.0 - Unauthenticated Arbitrary File Upload via 'export' AJAX Action	14 Feb 202606:42	–	cvelist
Nuclei	WordPress midi-Synth <= 1.1.0 - Unauthenticated Arbitrary File Upload	14 Jul 202607:07	–	nuclei
NVD	CVE-2026-1306	14 Feb 202607:16	–	nvd
Patchstack	WordPress midi-Synth plugin <= 1.1.0 - Unauthenticated Arbitrary File Upload via 'export' AJAX Action vulnerability	15 Feb 202622:12	–	patchstack
Positive Technologies	PT-2026-8073	14 Feb 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-1306	15 Feb 202607:10	–	redhatcve

Vulners

Node

adminkov midi-synthRange≤1.1.0wordpress

[
  {
    "vendor": "adminkov",
    "product": "midi-Synth",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "1.1.0",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/browser/midi-synth/tags/1.1.0/midiSynthConvert.php
plugins	www.plugins.trac.wordpress.org/browser/midi-synth/tags/1.1.0/midiSynthConvert.php
plugins	www.plugins.trac.wordpress.org/browser/midi-synth/tags/1.1.0/midiSynth.php
plugins	www.plugins.trac.wordpress.org/browser/midi-synth/tags/1.1.0/midiSynth.php
plugins	www.plugins.trac.wordpress.org/changeset
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/d5b695d7-c690-4748-b218-5699d1aa63bf

Parameter	Position	Path	Description	CWE
action	request body	wp-admin/admin-ajax.php	Arbitrary file upload via export AJAX action due to missing file type/extension validation (CWE-434).	CWE-434
fileMidi	request body	wp-admin/admin-ajax.php	Arbitrary file upload via export AJAX action due to missing file type/extension validation (CWE-434).	CWE-434
midiSynth_nonce	request body	wp-admin/admin-ajax.php	Arbitrary file upload via export AJAX action due to missing file type/extension validation (CWE-434).	CWE-434

17 Jun 2026 10:15Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.19.8

EPSS0.04458

SSVC

CWE-434