CVE-2026-58480

CVE-2026-58480 — RCE por Subida de Archivos No Autenticada en Blocksy Companion Pro Advanced Reviews → saveattachments → Bypass de strpos en Custom Fonts → shell.woff2.php Resumen CVE-2026-58480 también registrada como CVE-2026-15158 es una vulnerabilidad crítica CVSS 9.8 de subida arbitraria de...

CVE-2026-17604 Kirki <= 6.1.1 - Authenticated (Editor+) Path Traversal to Arbitrary File Read via 'data' Parameter

The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 6.1.1 via the 'data' parameter parameter. This makes it possible for authenticated attackers, with editor-level access and above, to read...

PT-2026-73133

Name of the Vulnerable Software and Affected Versions Kirki – Freeform Page Builder, Website Builder & Customizer versions prior to 6.1.2 Description This issue involves a Directory Traversal flaw where authenticated attackers with editor-level access or higher can read arbitrary files on the...

WordPress plugin The Ultimate WordPress Toolkit – WP Extended 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

WordPress plugin Responsive Lightbox & Gallery 代码问题漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

CVE-2026-2479: Server-Side Request Forgery (SSRF)

The Responsive Lightbox & Gallery plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.7.1. This is due to the use of strpos for substring-based hostname validation instead of strict host comparison in the ajaxuploadimage function. This makes i...

SimplePHPGal 0.7 - Remote File Inclusion Vulnerability

Exploit for php platform in category web applications Title: SimplePHPGal 0.7 - Remote File Inclusion Author: h4shur Vendor Homepage: https://johncaruso.ca Software Link: https://johncaruso.ca/phpGallery/ Software Link: https://sourceforge.net/projects/simplephpgal/ Tested on: Windows 10 & Google...

SimplePHPGal 0.7 - Remote File Inclusion

Title: SimplePHPGal 0.7 - Remote File Inclusion Author: h4shur date:2020-05-05 Vendor Homepage: https://johncaruso.ca Software Link: https://johncaruso.ca/phpGallery/ Software Link: https://sourceforge.net/projects/simplephpgal/ Tested on: Windows 10 & Google Chrome Category : Web Application Bug...

php: OOB read in grapheme_stripos and grapheme_strpos when negative offset is used

The graphemestrpos function in ext/intl/grapheme/graphemestring.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 allows remote attackers to cause a denial of service out-of-bounds read or possibly have unspecified other impact via a negative offset...

PHPCMS 9.3.1 /phpcms/modules/attachment/attachments.php 文件上传漏洞

PHPCMS是国内一款非常流行的网站内容管理系统，其9.3.1版本中，当上传文件名为xxx.Php.jpg%20%20%20%20%20%20%20Php时，经过fileext函数反向查找"."，然后截断了Php，即可通过isimage的验证，又由于strpos是大小写敏感的，当后缀为Php时即可绕过strpos，最后上传至服务器，apache服务器可以解析该畸形文件，最终导致文件上传漏洞。 PHPCMS 9.3.1...