CVE-2026-16098

creationtimestamp| type| source ---|---|--- 2026-08-16 05:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mt6hy7s2mg2e 2026-08-16 06:00:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mt6j4tnhqa2z...

CVE-2026-16098 ProSolution WP Client <= 2.0.10 - Unauthenticated Arbitrary File Upload via Content-Disposition Header Filename Override

The ProSolution WP Client plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.0.10 via the proSolhandleFileUpload function. This is due to missing validation of the attacker-controlled Content-Disposition header filename, which overrides the...