CyberSecBulletin

Adminkov vulnerabilities

We track 1 vulnerability in Adminkov products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on February 14, 2026.

1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score

Latest Adminkov vulnerabilities

  • 9.8 Critical severity

    midi-Synth: Unrestricted Upload of File with Dangerous Type

    CVE-2026-1306AdminkovEPSS 4.76%

    The midi-Synth plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type and file extension validation in the 'export' AJAX action in all versions up to, and including, 1.1.0. This makes it possible for unauthenticated attackers to