CVE-2026-118423

Full vulnerability record from the local CVENow database.

Description

The WP Libre Form WordPress plugin 1.5.0.1 does not validate the type of files uploaded through its form submissions, allowing unauthenticated attackers to upload PHP files to a web-accessible location and execute them, leading to remote code execution.

Severity

CRITICAL

CVSS score

10.0 (v3.1)

Vulnerability status

Received

Source identifier

[email protected]

Published

2026-11-06 08:17:18.550000

Last modified

2026-11-06 08:17:18.550000

View original CVE JSON

{
  "id": "CVE-2026-118423",
  "sourceIdentifier": "[email protected]",
  "published": "2026-11-06T08:17:18.550",
  "lastModified": "2026-11-06T08:17:18.550",
  "vulnStatus": "Received",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The WP Libre Form WordPress plugin 1.5.0.1 does not validate the type of files uploaded through its form submissions, allowing unauthenticated attackers to upload PHP files to a web-accessible location and execute them, leading to remote code execution."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Unknown",
          "product": "WP Libre Form",
          "defaultStatus": "unknown",
          "collectionURL": "https://wordpress.org/plugins",
          "versions": [
            {
              "version": "1.5.0.1",
              "lessThanOrEqual": "1.5.0.1",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
          "baseScore": 10.0,
          "baseSeverity": "CRITICAL",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "CHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 6.0
      }
    ]
  },
  "references": [
    {
      "url": "https://wpscan.com/vulnerability/35149a79-aee1-4f13-ba29-583c2224c5da/",
      "source": "[email protected]"
    }
  ]
}