CyberSecBulletin

Webinfos vulnerabilities

We track 1 vulnerability in Webinfos products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 3, 2026.

1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score

Latest Webinfos vulnerabilities

  • 9.8 Critical severity

    Webinfos: Unrestricted Upload of File with Dangerous Type

    CVE-2026-12872WebinfosEPSS 1.03%

    The Webinfos WordPress plugin through 1.2 does not validate the type or name of uploaded files, nor restrict the upload action with any authentication, capability, or nonce check, allowing unauthenticated attackers to upload arbitrary files (including PHP) to