{"affected":[{"defaultStatus":"unknown","product":"AZEXO Store Locator","source":"CNA: WPScan","vendor":"Unknown","versions":[{"lessThanOrEqual":"1.4","status":"affected","version":"0","versionType":"semver"}]}],"cveId":"CVE-2026-115204","cwes":["CWE-434"],"description":"The AZEXO Store Locator WordPress plugin through 1.4 does not perform capability or nonce checks on its AJAX actions and does not sanitise a request header used to build a file path, allowing any authenticated user such as a subscriber to write a file with an arbitrary name, location, and content, leading to remote code execution.","epss":null,"exploits":[{"kind":"exploit","source":"CNA: WPScan","url":"https://wpscan.com/vulnerability/c3c1a344-14ca-4c98-8f00-d38891a97d69/"}],"kev":null,"metrics":[],"modifiedAt":1794204025681,"publishedAt":1794204025681,"references":[{"source":"CNA: WPScan","tags":["exploit","vdb-entry","technical-description"],"url":"https://wpscan.com/vulnerability/c3c1a344-14ca-4c98-8f00-d38891a97d69/"}],"remediation":[],"revision":"099ec3adee6e79bd3c1979aa25bfe8755bb158bb86e28a69771269b393cff72b","sources":[{"modifiedAt":1794204025681,"name":"CNA: WPScan","retrievedAt":1794208103626,"url":"https://www.cve.org/CVERecord?id=CVE-2026-115204"}],"ssvc":null,"status":"published","title":"AZEXO Store Locator <= 1.4 - Subscriber+ Arbitrary File Write via azt_items_import","updatedAt":1794208103626}