PT-2026-107851

The Bricksforge plugin for WordPress is vulnerable to unauthenticated arbitrary file upload in versions up to, and including, 3.1.8.9. This is due to insufficient validation of the attacker-controlled URL field in the 'temporaryFileUploads' parameter during form submission. An unauthenticated...

Exploit for CVE-2026-13001

CVE-2026-13001 — Podlove Podcast Publisher ≤ 4.5.1 Unauthentic...