CVE-2026-111255 | cservit Affiliate Toolkit Plugin up to 3.9.2 on WordPress Image Download upload_image unrestricted upload

October 28, 2026 Yanac

A vulnerability, which was classified as critical, has been found in cservit Affiliate Toolkit Plugin up to 3.9.2 on WordPress. The impacted element is the function upload_image of the component Image Download. This manipulation causes unrestricted upload.

This vulnerability is tracked as CVE-2026-111255. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More