Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Buy Us a Coffee

Image Uploader for Welcart Authenticated SQL Injection via post_title Parameter (CVE-2026-16080)

www.wordfence.com 2026-08-16 查看中文 →

Security Advisory CVE-2026-16080 Medium Wordfence

Affected:

Image Uploader for Welcart <= 1.4.6

Referenced CVEs: CVE-2026-16080 · 6.5

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from www.wordfence.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

WordPress Elementor WooCommerce Builder Addon Privilege Escalation via PDF Import 2026-08-25 WordPress Newsletter Plugin Missing Authorization Arbitrary Modification (CVE-2024-2825) 2026-08-25 Media Demy <=1.1.9 Authenticated SQL Injection via Bulk Payment (CVE-2023-2825) POC 2026-08-25 Ultimate Member < 2.2.1 Stored XSS via Profile Field (CVE-2023-10184) 2026-08-25 All in One WP Migration < 7.29 Unauthenticated SQL Injection via a2zow Component 2026-08-25

Offline Archive

Offline screenshot & PDF are Pro-exclusive

Upgrade to Pro