CVE-2026-115212

Ainda não há histórico EPSS suficiente.

The mView 豆瓣电影 WordPress plugin through 1.0.3 does not validate the type, name, or source of a remotely fetched file, nor perform any capability or authorization check, before saving it to a web-accessible directory, allowing any authenticated user such as a subscriber to upload arbitrary PHP files and achieve remote code execution.

• wpscan.comhttps://wpscan.com/vulnerability/c1fd09cb-0df7-4643-a888-1873c90e7b64/

Nenhum CVE relacionado por CWE ou produto.