← All advisories

Critical severity9.9NVD Advisory· Published Aug 24, 2026· Updated Aug 27, 2026

CVE-2026-32559

CVE-2026-32559

Description

Subscriber Arbitrary File Upload in UltimateAI <= 3.1.0 versions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

1

WordPress/Ultimateaillm-fuzzy
Range: <=3.1.0
Package: https://wordpress.org/plugins/ultimateai

Patches

Vulnerability mechanics

References

1

patchstack.com/database/wordpress/plugin/ultimate_ai/vulnerability/wordpress-ultimateai-plugin-3-1-0-arbitrary-file-upload-vulnerabilitynvd

News mentions

1

Wordfence Intelligence Weekly WordPress Vulnerability Report (August 24, 2026 to August 30, 2026)
Wordfence Blog · Sep 3, 2026