ProfilePress Authenticated Arbitrary File Upload RCE via upload_mimes Filter (CVE-2026-13352)

www.wordfence.com 2026-07-17查看中文 →

Security AdvisoryCVE-2026-13352HighProfilePress

Affected:

ProfilePress <= 4.16.18

Fixed in:

4.16.19

Referenced CVEs: CVE-2026-13352 · 8.8

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from www.wordfence.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Ultimate Addons for Elementor <= 2.9.1 Stored XSS via Navigation Menu Widget (CVE-2026-15787) 2026-07-22 WordPress Contact Form 7 Dynamic Text Extension Unauthenticated Arbitrary Shortcode Execution (CVE-2025-13146) 2026-07-22 Easy Form Builder <=4.0.11 Unauthenticated Privilege Escalation to Administrator via Password Recovery Endpoint (CVE-202 2026-07-22 360 Tianqing Endpoint Security Management System Arbitrary File Read Vulnerability with POC 2026-07-22 Yonyou GRP-U8 Administrative Management Software SQL Injection Vulnerability (CVE-2021-3393) with POC 2026-07-22

Offline Archive

Offline screenshot & PDF are Pro-exclusive