CVE-2026-109218 - Contact Manager <= 9.1.2 - Unauthenticated Arbitrary File Upload via Trailing-Dot Filename Blacklist Bypass
CVE ID :CVE-2026-109218 Published : Oct. 28, 2026, 7:16 a.m. | 1 hour, 7 minutes ago Description :The Contact Manager plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 9.1.2 via the add_message function. This is due to an incomplete extension...