CVE-2026-2354 - Swiss Toolkit For WP <= 1.4.6 - Authenticated (Author+) Arbitrary File Upload via upload_extension_files()
CVE ID :CVE-2026-2354 Published : July 11, 2026, 5:16 a.m. | 1 hour, 16 minutes ago Description :The Swiss Toolkit For WP plugin for WordPress is vulnerable to arbitrary file upload due to a flawed file type validation bypass in the `upload_extension_files()` function in all versions up to,...