← العودة للجدول
CVE-2026-110268
CVE-2026-110268 — The Post Export Import with Media plugin for WordPress is vulnerable to Director
📅 2026-10-17
🟡 Medium 🔥 No NVD Vulnerability WordPress CVSS 4.9

📋 الوصف الكامل

The Post Export Import with Media plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.17.2 via the 'theme_slug' parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to perform actions on files outside of the originally intended directory. Exploitation requires the peiwm_enable_admin_downloa

💻 الأنظمة المتأثرة

WordPress

⚠️ نوع التهديد

Vulnerability

🔗 CVE ID

CVE-2026-110268

📡 المصدر

NVD

✅ الحلول والتخفيف

Update to v1.17.2

🔗 المصدر الأصلي ← 📘 NVD ← ⚡ CISA KEV ← 🔍 Valters IT ←