PULSE
EN
FEED
ransomscarlettgroup reclama a nbcuniversal.com · US · Technologyransomn0n reclama a Xylanpicks · US · Not Foundransombravox reclama a GSE-M Technology Sdn. Bhd. · MY · Technologyransomemperador reclama a Bruin Group LLC · US · Otherransomsilentransomgroup reclama a M... M... · Not Foundransomsilentransomgroup reclama a P... H... · Not Foundransomglobal secret group reclama a Graves Fireplaces, Inc. · US · Manufacturingransomincransom reclama a centralrogers.com · US · Otherransomdark project reclama a Asensus Surgical · US · Healthcareransomdark project reclama a The Excalibur Group · US · Not Foundransomsilentransomgroup reclama a P...S...R... · Not Foundransomaurora reclama a Duarte Nursery, Inc. · US · Agriculture and Food Productionransomn0n reclama a 51Ridge (Newark NJ hosting/IT) · US · Technologyransombooba project reclama a Research Foundation of The City University of New York · US · Educationransomscarlettgroup reclama a nbcuniversal.com · US · Technologyransomn0n reclama a Xylanpicks · US · Not Foundransombravox reclama a GSE-M Technology Sdn. Bhd. · MY · Technologyransomemperador reclama a Bruin Group LLC · US · Otherransomsilentransomgroup reclama a M... M... · Not Foundransomsilentransomgroup reclama a P... H... · Not Foundransomglobal secret group reclama a Graves Fireplaces, Inc. · US · Manufacturingransomincransom reclama a centralrogers.com · US · Otherransomdark project reclama a Asensus Surgical · US · Healthcareransomdark project reclama a The Excalibur Group · US · Not Foundransomsilentransomgroup reclama a P...S...R... · Not Foundransomaurora reclama a Duarte Nursery, Inc. · US · Agriculture and Food Productionransomn0n reclama a 51Ridge (Newark NJ hosting/IT) · US · Technologyransombooba project reclama a Research Foundation of The City University of New York · US · Education
← Todos los CVEs
CVE Watch30 sept 2026

CVE-2026-85573

The All in One Files Upload WordPress plugin before 2.0.17 adds SVG to the site's allowed upload types and does not sanitise uploaded files

CVSS

—

Sin CVSS

EPSS

0.3%

p19

KEV

—

Exploit Today

6

0-100

Publicado: 30 sept 2026 · Última mod.: 30 sept 2026

EPSS · 30d
0.2%EPSS · 30 días0.3%
2026-09-302026-10-20
Descripción técnica

The All in One Files Upload WordPress plugin before 2.0.17 adds SVG to the site's allowed upload types and does not sanitise uploaded files or verify the authenticity of its public upload requests, allowing unauthenticated users to store files containing active content which run in the site's origin when a victim opens them.

Referencias oficiales
CVEs relacionados

Sin CVEs relacionados por CWE o producto.