{"id":"CVE-2026-118423","aliases":[],"cve":{"records":[{"id":"CVE-2026-118423","source":"WPScan","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-10-28T05:00:50.157Z","published":"2026-11-06T07:30:55.270Z","modified":"2026-11-06T11:50:26.362Z"}],"publishers":[{"name":"WPScan","role":"CNA","organizationId":"1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81","modified":"2026-11-06T07:30:55.270Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-11-06T11:50:26.362Z"}],"references":[{"url":"https://wpscan.com/vulnerability/35149a79-aee1-4f13-ba29-583c2224c5da/","tags":["exploit","vdb-entry","technical-description"],"source":"WPScan"}],"weaknesses":[{"id":"CWE-434","description":"CWE-434 Unrestricted Upload of File with Dangerous Type","source":"CISA-ADP"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-11-06T11:41:23.335576Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"yes"},{"name":"Technical Impact","value":"total"}]}]},"title":"WP Libre Form 1.5.0.1 - Unauthenticated RCE via Arbitrary File Upload","titleSource":"WPScan","descriptionSource":"WPScan","description":"The WP Libre Form WordPress plugin 1.5.0.1 does not validate the type of files uploaded through its form submissions, allowing unauthenticated attackers to upload PHP files to a web-accessible location and execute them, leading to remote code execution.","score":10,"severity":"critical","published":"2026-11-06T07:30:55.270Z","modified":"2026-11-06T11:50:26.362Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Unknown","name":"WP Libre Form","platforms":[],"versions":[{"version":"1.5.0.1","status":"affected","lessThanOrEqual":"1.5.0.1","versionType":"semver"}],"defaultStatus":"unknown","cpes":[],"source":"WPScan","url":"https://www.cve.org/CVERecord?id=CVE-2026-118423"}],"remediation":[],"references":["https://wpscan.com/vulnerability/35149a79-aee1-4f13-ba29-583c2224c5da/"],"sources":[{"name":"CVE","id":"CVE-2026-118423","modified":"2026-11-06T11:50:26.362Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-118423"}],"assessments":[{"source":"WPScan","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","score":10}],"sourceAffected":[],"observedAt":"2026-11-06T12:03:31.807Z","kev":{"status":"not-listed","checkedAt":"2026-11-07T23:15:31.143Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-11-06T10:05:39.259Z","attemptedAt":"2026-11-06T10:05:39.259Z"},{"source":"GHSA","status":"available","checkedAt":"2026-11-06T10:05:37.167Z","attemptedAt":"2026-11-06T10:05:37.167Z"},{"source":"EUVD","status":"available","checkedAt":"2026-11-06T10:05:40.252Z","attemptedAt":"2026-11-06T10:05:40.252Z"},{"source":"EPSS","status":"no-result","checkedAt":"2026-11-06T10:05:40.362Z","attemptedAt":"2026-11-06T10:05:40.362Z"}],"evidence":[{"source":"GitHub Advisory Database","id":"GHSA-mhrf-qjwq-4j74","url":"https://github.com/advisories/GHSA-mhrf-qjwq-4j74","modified":"2026-11-06T09:31:34Z","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","checkedAt":"2026-11-06T10:05:37.167Z"},{"source":"NVD","id":"CVE-2026-118423","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-118423","modified":"2026-11-06T08:17:18.550","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","checkedAt":"2026-11-06T10:05:39.259Z"},{"source":"ENISA EUVD","id":"EUVD-2026-117971","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-117971","modified":"Nov 6, 2026, 7:30:55 AM","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","checkedAt":"2026-11-06T10:05:40.252Z"}],"aiSummary":{"text":"WP Libre Form 1.5.0.1 has an unauthenticated file upload weakness, potentially allowing attackers to upload malicious files. The stated impact is remote code execution. Unauthenticated access is required to exploit this weakness.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-06T12:06:02.187Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-118423"}]}}