CVE-2026-6261

creationtimestamp| type| source ---|---|--- 2026-05-05 12:45:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml47qqdazm2k 2026-05-05 16:35:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml4mlxvrp72r 2026-05-06 22:39:09+00:00| seen|...

CVE-2026-6261

The Betheme theme for WordPress is vulnerable to Arbitrary File Upload in versions up to, and including, 28.4. This is due to the uploadicons function workflow moving and unzipping user-controlled ZIP files into a public uploads directory without validating extracted file types. This makes it...