CVE-2026-113472 | Depicter Plugin up to 4.8.1 on WordPress Editor Media-Upload Endpoint unrestricted upload

October 23, 2026 Yanac

A vulnerability labeled as critical has been found in Depicter Plugin up to 4.8.1 on WordPress. This vulnerability affects unknown code of the component Editor Media-Upload Endpoint. Such manipulation leads to unrestricted upload.

This vulnerability is uniquely identified as CVE-2026-113472. The attack can be launched remotely. No exploit exists.

The affected component should be upgraded.VulDB Recent EntriesRead More