Ahime Image Printer <= 1.0.0 - Unauthenticated Arbitrary File Upload
Historical advisory recorded 13 Nov 2026 06:55:02 UTC. Read the latest advisory.
cve-program · CVE-2026-124833
PublishedThe Ahime Image Printer WordPress plugin through 1.0.0 does not validate the name, extension or type of uploaded files before writing them to disk, allowing unauthenticated attackers to upload arbitrary files, including PHP, and execute code on the server.
Read the publisher's advisoryAffected versions, risk and source history
cve-program · CVE-2026-124833
PublishedAhime Image Printer <= 1.0.0 - Unauthenticated Arbitrary File Upload
The Ahime Image Printer WordPress plugin through 1.0.0 does not validate the name, extension or type of uploaded files before writing them to disk, allowing unauthenticated attackers to upload arbitrary files, including PHP, and execute code on the server.
- Source published
- 13 Nov 2026 06:00:09 UTC
- Source modified
- 13 Nov 2026 06:00:09 UTC
- Saved here
- 13 Nov 2026 06:55:02 UTC
- Source terms
- CVE Program Terms of Use
Original source record · Cite this exact observation · Complete original publisher JSON
Source: cve-program · CVE Program Terms of Use. The publisher's wording is preserved. ChangeIntel groups the information and labels changes. The JSON record includes additional source fields.