Vulnerabilities in wpazleen
6 resultsCVE-2026-13430HIGHPost Export Import with Media <= 1.13.1 - Authenticated (Administrator+) Arbitrary File Upload via Trailing-Dot Filename Bypass in ZIP Media ImportEPSS 1.1%CVE-2026-104748CRITICALSimpleForm <= 3.10.0 - Unauthenticated Privilege Escalation to wp_capabilities Mass Assignment via simpleform_wp_registerEPSS 0.8%CVE-2026-110268MEDIUMPost Export Import with Media <= 1.17.2 - Authenticated (Administrator+) Path Traversal via 'theme_slug' ParameterEPSS 0.8%CVE-2026-118235CRITICALSimpleForm <= 3.10.2 - Unauthenticated Arbitrary File Upload via Trailing-Dot Filename via Unknown File Key in simpleform_get_submit_dataEPSS 0.7%CVE-2026-104763MEDIUMPost Export Import with Media <= 1.17.1 - Authenticated (Administrator+) Path Traversal to Arbitrary File Read via 'file_path' Parameter in media_metadata.jsonEPSS 0.7%CVE-2026-104764HIGHPost Export Import with Media <= 1.17.1 - Authenticated (Administrator+) PHP Object Injection via 'page_data[meta]' ParameterEPSS 0.6%