CVE ID :CVE-2026-101888 Published : Oct. 1, 2026, 5:17 p.m. | 2 hours, 1 minute ago Description :The Prime Mover plugin for WordPress before 2.2.1 contains a Zip Slip path traversal vulnerability that allows authenticated administrators to write arbitrary files outside the intended extraction...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-101888 - Prime Mover < 2.2.1 Zip Slip Path Traversal File Write

VERWANDTEARTIKEL

CVE-2026-55230 - Vvveb: Stored XSS in Vvveb via sanitizeHTML() filter bypass using a quoted greater-than character

CVE-2026-104059 - Lektor 3.3.14 CSRF via Admin API Endpoints

CVE-2026-97662 - Argument injection in the diff scan operation in AWS security-agent-mcp-server allows arbitrary host file creation, overwrite, and truncation outside the intended workspace

CVE-2026-104018 - VxWorks 7 improper privilege management

CVE-2026-102294 - Authenticated OS Command Injection in TL-WR841N IPv6 WAN Configuration

CVE-2026-102369 - Unauthenticated Remote Code Execution via MacTool Command Injection in TP-Link Tapo C120 & C200