Critical severity9.8NVD Advisory· Published Aug 4, 2026· Updated Aug 26, 2026
CVE-2026-16618
CVE-2026-16618
Description
The Improve SEO WordPress plugin through 2.0.11 does not properly validate uploaded files, checking only the file content type while writing the file with the attacker-supplied extension into a publicly accessible directory, allowing unauthenticated users to upload executable PHP files and achieve remote code execution.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <=2.0.11
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.