CVE-2026-58480

CVE-2026-58480 — RCE por Upload de Arquivo Não Autenticado no Blocksy Companion Pro Advanced Reviews → saveattachments → Bypass do strpos em Custom Fonts → shell.woff2.php Visão Geral CVE-2026-58480 também referenciada como CVE-2026-15158 é uma vulnerabilidade crítica CVSS 9.8 de upload arbitrári...

CVE-2026-17604 Kirki <= 6.1.1 - Authenticated (Editor+) Path Traversal to Arbitrary File Read via 'data' Parameter

The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 6.1.1 via the 'data' parameter parameter. This makes it possible for authenticated attackers, with editor-level access and above, to read...