Teddy-bear-customize-addon vulnerabilities
We track 2 vulnerabilities in Teddy-bear-customize-addon products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 11, 2026.
2vulnerabilities
2critical
0high
0exploited
9.9average CVSS score
Latest Teddy-bear-customize-addon vulnerabilities
- 10.0 Critical severity
teddy-bear-customize-addon: Improper Control of Generation of Code
The teddy-bear-customize-addon WordPress plugin through 1.0.5 does not properly validate uploaded files, relying on a client-supplied content type and preserving the original filename, allowing unauthenticated attackers to upload arbitrary PHP files and execut
- 9.8 Critical severity
teddy-bear-customize-addon: Improper Authentication
The teddy-bear-customize-addon WordPress plugin through 1.0.5 does not verify a user's password before authenticating them, allowing unauthenticated attackers to log in as any registered user, including administrators, by supplying only that user's email addre