3 matches found
CVE-2026-74016
creationtimestamp| type| source ---|---|--- 2026-08-20 14:09:39+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtjgd3bwrq2c 2026-08-20 14:10:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtjgdtljt22j...
9.9CVSS4.9AI score0.00447EPSS
SaveExploits0References2
CVE-2026-74016
Subscriber Arbitrary File Upload in Smart Cleaning = 4.8.6 versions...
9.9CVSS0.00447EPSS
SaveExploits0References1
CVE-2026-74016
The WordPress Smart Cleaning theme (≤4.8.6) allows any logged-in subscriber to upload arbitrary files, enabling remote code execution. Patchstack reports this as critical (CVSS 9.9) with a fix available in newer theme versions; upgrading the theme is the primary mitigation. No in-the-wild exploit...
9.9CVSS5.3AI score0.00447EPSS
SaveExploits0References1
20