Swiss Toolkit For WP <= 1.4.6 Authenticated Arbitrary File Upload to RCE (CVE-2026-2354)

Vulnerability Overview Vulnerability Name: Swiss Toolkit For WP <= 1.4.6 - Authenticated (Author+) Arbitrary File Upload via upload_extension_files() CVE ID: CVE-2026-2354 CVSS Score: 8.8 (High) Release Date: July 10, 2026 Last Updated: July 11, 2026 Researcher: Willwolo (CybrX) Affected Range Software Type: Plugin Software Slug: swiss-toolkit-for-wp Affected Versions: <= 1.4.6 Remediation Patch Status: No known patch available Recommended Action: Carefully review the vulnerability details and implement mitigation measures based on your organization's risk tolerance. It is advisable to uninstall the affected software and seek alternatives. Vulnerability Description The Swiss Toolkit For WP plugin contains an arbitrary file upload vulnerability due to a flaw in file type validation within the function. This function hooks into WordPress's filter and uses to check if the filename contains the configured extension string, rather than validating the actual file extension. This allows authenticated attackers with Author-level access to upload arbitrary files (including PHP) to the server of affected websites. If the "Enhanced Multi-format Image Support" feature is enabled and at least one extension (e.g., .avif) is included in the allowed formats, this can lead to Remote Code Execution (RCE). References plugins.trac.wordpress.org plugins.trac.wordpress.org plugins.trac.wordpress.org plugins.trac.wordpress.org Recent Vulnerabilities 1. Swiss Toolkit For WP <= 1.4.0 - Missing Authorization - CVE ID: CVE-2025-31546 - CVSS Score: 4.3 - Researcher: Peter Thaleikis - Date: March 31, 2025 2. Swiss Toolkit For WP <= 1.4.1 - Missing Authorization - CVE ID: CVE-2025-31544 - CVSS Score: 4.3 - Researcher: Peter Thaleikis - Date: March 31, 2025 3. Swiss Toolkit For WP <= 1.0.7 - Authenticated (Contributor+) Authentication Bypass - CVE ID: CVE-2024-5204 - CVSS Score: 8.8 - Researcher: István Manton - Date: May 28, 2024 Additional Information Wordfence Intelligence: Provides free personal and commercial API access to the WordPress vulnerability database and supports webhook integration for the latest vulnerability information. Wordfence Intelligence WordPress Plugin: Offers completely free access and querying of the API, with documentation on how to access and consume vulnerability data. Contact Technical Support: 9am-8pm ET, 6am-5pm PT, and 2pm-1am UTC/GMT (excluding weekends and holidays) Response Time: 24-hour support, 365 days a year, with a 1-hour response time Copyright Information Copyright: © 2012-2026 Defiant Inc. All Rights Reserved License: Licensed under Defiant Inc. and The MITRE Corporation terms. Social Media Facebook: Wordfence Twitter: Wordfence LinkedIn: Wordfence Instagram: Wordfence Subscribe Subscribe Link: Subscribe Disclaimer Disclaimer: Disclaimer Privacy Policy Privacy Policy: Privacy Policy Terms of Service Terms of Service: Terms of Service Other Links Products: Wordfence Free, Wordfence Premium, Wordfence Care, Wordfence Response, Wordfence CLI, Wordfence Intelligence, Wordfence Central Support: Documentation, Learning Center, Free Support, Premium Support News: Blog, In The News, Vulnerability Advisories About: About Wordfence, Affiliate Program, Employment, Contact, Security, CVE Request Form Subscribe for Updates Subscription Form: Subscribe Subscription Terms Subscription Terms: Subscription Terms Subscription Privacy Policy Subscription Privacy Policy: Subscription Privacy Policy Subscription Confirmation Subscription Confirmation: Subscription Confirmation Subscription Cancellation Subscription Cancellation: Subscription Cancellation Subscription Help Subscription Help: Subscription Help Subscription FAQ Subscription FAQ: Subscription FAQ Subscription Contact Subscription Contact: Subscription Contact Subscription Feedback Subscription Feedback: Subscription Feedback Subscription Suggestions Subscription Suggestions: Subscription Suggestions Subscription Complaints Subscription Complaints: Subscription Complaints Subscription Reports Subscription Reports: Subscription Reports Subscription Warnings Subscription Warnings: Subscription Warnings Subscription Notifications Subscription Notifications: Subscription Notifications Subscription Reminders Subscription Reminders: Subscription Reminders Subscription Tips Subscription Tips: Subscription Tips Subscription Guides Subscription Guides: Subscription Guides Subscription Tutorials Subscription Tutorials: Subscription Tutorials Subscription Examples Subscription Examples: Subscription Examples Subscription Templates Subscription Templates: Subscription Templates Subscription Styles Subscription Styles: Subscription Styles Subscription Formats Subscription Formats: Subscription Formats Subscription Layouts Subscription Layouts: Subscription Layouts Subscription Designs Subscription Designs: Subscription Designs Subscription Themes Subscription Themes: Subscription Themes Subscription Colors Subscription Colors: Subscription Colors Subscription Fonts

Goal Reached Thanks to every supporter — we hit 100%!

Swiss Toolkit For WP <= 1.4.6 Authenticated Arbitrary File Upload to RCE (CVE-2026-2354)

More from this source