CVE-2026-13157

The CVE-2026-13157 entry concerns the Demo Import WordPress plugin up to version 1.1.3, where file-type validation is bypassed during demo-content import. This allows high-privilege users (Administrator by default, including non-super-admins on multisite) to upload executable PHP files to the upl...

FluentCMS 跨站脚本漏洞

FluentCMS is an open-source content management system developed by FluentCMS. Version 1.2.3 of FluentCMS has a cross-site scripting vulnerability. This vulnerability stems from a storage-based cross-site script in the file management module. It allows authenticated administrators to upload...

WordPress Plugin WPtouch 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists in...