VYPR

mView 豆瓣电影

by WordPress

CVEs (1)

  • CVE-2026-115212Nov 9, 2026
    risk 0.00cvss —epss —

    The mView 豆瓣电影 WordPress plugin through 1.0.3 does not validate the type, name, or source of a remotely fetched file, nor perform any capability or authorization check, before saving it to a web-accessible directory, allowing any authenticated user such as a subscriber…