CVE-2026-90879 | zyx0814 FilePress up to 3.0.1 Publish dzz/publish/search.php orderby/order sql injection (Issue 74)

September 14, 2026 Yanac

A vulnerability was found in zyx0814 FilePress up to 3.0.1. It has been declared as critical. This vulnerability affects unknown code of the file dzz/publish/search.php of the component Publish Module. Such manipulation of the argument orderby/order leads to sql injection.

This vulnerability is uniquely identified as CVE-2026-90879. The attack can be launched remotely. Moreover, an exploit is present.

The project was informed of the problem early through an issue report but has not responded yet.VulDB Recent EntriesRead More