CRITICALCVSS v3.1 9.8Vulnerability
CVE-2026-124833
The Ahime Image Printer WordPress plugin through 1.0.0 does not validate the name, extension or type of uploaded files before writing them to disk, allowing unauthenticated attackers to upload arbitrary files, including PHP, and execute code on the server.
Properties
- Severity
- CRITICAL
- Nvd fetched at
- 2026-11-14T00:40:25.638091+00:00
- Cvss severity
- CRITICAL
- Cvss score
- 9.8
- Epss score
- 0.00162
- Retrieved at
- 2026-11-14T00:51:03+00:00
- Last source
- FIRST EPSS
- Score
- 9.8
- Cvss version
- 3.1
- Cve id
- CVE-2026-124833
- Cvss vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- First seen by Signal
- 2026-11-13T08:17:28+00:00
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Published at
- 2026-11-13T06:16:54.057
- Last modified
- 2026-11-13T19:19:22.500
- Epss percentile
- 0.05488
Related Entities (1)
HAS_WEAKNESS (1)
Related research
Explore deeper with Ninja Signal's threat intelligence graph