https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-14T19:08:36.324328+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-104028 CVE-2026-104028 — Anton Extensions <= 1.2.2 - Unauthenticated Arbitrary File Upload to RCE 2026-10-14T19:08:36.325699+00:00

Affected: Unknown Anton Extensions

The Anton Extensions WordPress plugin through 1.2.2 does not perform any capability check, nonce verification, or file-type validation before writing attacker-supplied content to an attacker-chosen path, allowing unauthenticated attackers to upload arbitrary PHP files and achieve remote code execution.