CVE-2026-57798 | SaurabhSharma NewsPlus Shortcodes Plugin up to 4.2.0 on WordPress Shortcode filename file inclusion

July 13, 2026 Yanac

A vulnerability was found in SaurabhSharma NewsPlus Shortcodes Plugin up to 4.2.0 on WordPress. It has been rated as problematic. This affects an unknown function of the component Shortcode Handler. Performing a manipulation of the argument filename results in file inclusion.

This vulnerability is cataloged as CVE-2026-57798. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More