CVE-2026-109218 | kleor Contact Manager Plugin up to 9.1.2 on WordPress Extension Derivation Routine add_message unrestricted upload

October 28, 2026 Yanac

A vulnerability was found in kleor Contact Manager Plugin up to 9.1.2 on WordPress. It has been declared as critical. Affected is the function add_message of the component Extension Derivation Routine. The manipulation results in unrestricted upload.

This vulnerability is cataloged as CVE-2026-109218. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More