CVE-2026-85576 | All in One Files Upload Plugin up to 2.0.16 on WordPress authorization

September 30, 2026 Yanac

A vulnerability described as critical has been identified in All in One Files Upload Plugin up to 2.0.16 on WordPress. This affects an unknown function. Executing a manipulation can lead to missing authorization.

This vulnerability is tracked as CVE-2026-85576. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More