CVE-2026-12872

The Webinfos WordPress plugin (versions through 1.2 ) is vulnerable to an unauthenticated arbitrary file upload vulnerability. The software fails to validate the type or name of uploaded files and lacks authentication, capability, or nonce checks for the upload action. This allows unauthenticated...