CVE ID :CVE-2026-58480 Published : July 8, 2026, 2:17 p.m. | 57 minutes ago Description :Blocksy Companion Pro plugin for WordPress before 2.1.47 contains an unauthenticated arbitrary file upload vulnerability that allows attackers to upload executable files by bypassing extension validation...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-58480 - Blocksy Companion Pro < 2.1.47 Unauthenticated File Upload via save_attachments

VERWANDTEARTIKEL

CVE-2026-59703 - repomix - Local File Inclusion via file:// URL Scheme in Git Clone Endpoint

CVE-2026-15067 - Multiple Security Vulnerabilities in Terraform Provider for Snowflake Could Allow Privilege Escalation and Unauthorized Snowflake Account Takeover

Ubiquiti Patches Critical UniFi Flaws Across Connect, Talk, Access, Protect, and OS

CVE-2026-15062 - SQL Injection in Snowflake Snowpark Python SDK

CVE-2026-11903 - Stored XSS in MOVEit Transfer Ad Hoc module

CVE-2026-58656 - Grav API Plugin - Cross-Origin Admin Account Takeover via CORS Wildcard and JWT Query Parameter