CVE-2026-118064

The Advance Guest Post WordPress plugin, versions through 1.9 , contains a vulnerability where it fails to properly restrict or validate file uploads. The application uses a nonce exposed to all front-end visitors and only verifies a file's leading bytes, enabling unauthenticated users to upload ...