{"affected":[{"defaultStatus":"unknown","product":"Advance Guest Post","source":"CNA: WPScan","vendor":"Unknown","versions":[{"lessThanOrEqual":"1.9","status":"affected","version":"0","versionType":"semver"}]}],"cveId":"CVE-2026-118064","cwes":["CWE-434"],"description":"The Advance Guest Post WordPress plugin through 1.9 does not properly restrict or validate file uploads, authorizing an upload action with a nonce exposed to every front-end visitor and checking only a file's leading bytes, allowing unauthenticated users to upload arbitrary PHP files and execute code remotely.\n\nSuccessful exploitation additionally requires the target to run PHP 7.x; on PHP 8.0 and later the vulnerable code path raises a fatal error before the file is written.","epss":null,"exploits":[{"kind":"exploit","source":"CNA: WPScan","url":"https://wpscan.com/vulnerability/897a812b-b84b-4422-9f3b-20402a0a8af5/"}],"kev":null,"metrics":[],"modifiedAt":1794549607125,"publishedAt":1794549607125,"references":[{"source":"CNA: WPScan","tags":["exploit","vdb-entry","technical-description"],"url":"https://wpscan.com/vulnerability/897a812b-b84b-4422-9f3b-20402a0a8af5/"}],"remediation":[],"revision":"1240dbd12f87a05d5967ba2d0559a4975f518eece95c35da9045e5fd166abe23","sources":[{"modifiedAt":1794549607125,"name":"CNA: WPScan","retrievedAt":1794550127521,"url":"https://www.cve.org/CVERecord?id=CVE-2026-118064"}],"ssvc":null,"status":"published","title":"Advance Guest Post <= 1.9 - Unauthenticated Arbitrary File Upload via featured_action","updatedAt":1794550127521}