CVE-2026-16618

CVE-2026-16618 affects the ImproveSEO WordPress plugin up to version 2.0.11. The vulnerability arises from improper validation of uploaded files: the plugin only checks file content type while writing the file with the attacker-supplied extension to a publicly accessible directory, enabling unaut...