Webinfos vulnerabilities
We track 1 vulnerability in Webinfos products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 3, 2026.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Webinfos vulnerabilities
- 9.8 Critical severity
Webinfos: Unrestricted Upload of File with Dangerous Type
The Webinfos WordPress plugin through 1.2 does not validate the type or name of uploaded files, nor restrict the upload action with any authentication, capability, or nonce check, allowing unauthenticated attackers to upload arbitrary files (including PHP) to