Vulnerability record/PUBLISHED/Published Nov 13, 2026 06:00:09 UTC
CVE-2026-124833
The Ahime Image Printer WordPress plugin through 1.0.0 does not validate the name, extension or type of uploaded files before writing them to disk, allowing unauthenticated attackers to upload arbitrary files, including PHP, and execute code on the server.
Base scoreN/A/ 10
SeverityNoneCVSS unscored
Exploitability / impact
CVSS metric breakdown
Base severityNone
No CVSS vector is available for this record.
CVSS communicates standardized severity and impact characteristics. It does not establish whether a system is exploitable in your specific environment.
Record context
CVE Numbering AuthorityWPScan
Last updatedNov 13, 2026 06:00:09 UTC
PublishedNov 13, 2026 06:00:09 UTC
ReservedNov 9, 2026 13:52:06 UTC
Credits
- Khaled Alenazi (Nxploited)
- WPScan