CVE ID :CVE-2026-14487 Published : July 8, 2026, 5:16 a.m. | 1 hour, 58 minutes ago Description :The Simple Coherent Form plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the removeUploadDir function in all versions up to, and...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-14487 - Simple Coherent Form <= 2.4.13 - Unauthenticated Arbitrary File Deletion via 'id' Parameter

VERWANDTEARTIKEL

15-year-old GhostLock Kernel Flaw Enables Privilege Escalation in Major Linux Distributions

15-Year-Old GhostLock Flaw Enables Root and Container Escape on Most Linux Distros

CVE-2026-12153 - WP Learn Manager <= 1.1.8 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation and Activation via jslearnmanager_ajax AJAX Action

CVE-2026-14489 - WHMCS Bridge <= 6.9 - Unauthenticated Arbitrary File Upload via 'ccce' Parameter

CVE-2026-14495 - DoLogin Security <= 4.3 - Unauthenticated Authentication Bypass via Insufficient Randomness via 'dologin' Parameter Weak PRNG Token

CVE-2026-56437 - Pupsman DLL Hijacking Vulnerability