CVE-2026-105123 | vincent-peugnet wcms up to 3.18.0 Media Upload /api/v0/media/upload path unrestricted upload

October 4, 2026 Yanac

A vulnerability classified as critical has been found in vincent-peugnet wcms up to 3.18.0. This affects an unknown function of the file /api/v0/media/upload of the component Media Upload. This manipulation of the argument path causes unrestricted upload.

This vulnerability is tracked as CVE-2026-105123. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More