CVE ID :CVE-2016-20075 Published : June 15, 2026, 2:16 p.m. | 52 minutes ago Description :WordPress Ultimate Product Catalog 3.8.6 contains an arbitrary file upload vulnerability that allows authenticated users with contributor, editor, author, or administrator roles to upload malicious files...