{"affected":[{"defaultStatus":"unaffected","product":"Fiber Admin","source":"CNA: WPScan","vendor":"Unknown","versions":[{"lessThan":"4.0.1","status":"affected","version":"3.1.0","versionType":"semver"}]}],"cveId":"CVE-2026-121491","cwes":["CWE-94"],"description":"The Fiber Admin WordPress plugin before 4.0.1 does not validate or escape a request header before writing it into a PHP file it regenerates on an unprotected admin hook, allowing unauthenticated attackers to execute arbitrary code when its custom database error page is enabled and they win a race against an administrator saving its settings.","epss":null,"exploits":[{"kind":"exploit","source":"CNA: WPScan","url":"https://wpscan.com/vulnerability/42b9773d-9c69-4435-be20-ae86f52b4608/"}],"kev":null,"metrics":[],"modifiedAt":1794031226885,"publishedAt":1794031226885,"references":[{"source":"CNA: WPScan","tags":["exploit","vdb-entry","technical-description"],"url":"https://wpscan.com/vulnerability/42b9773d-9c69-4435-be20-ae86f52b4608/"}],"remediation":[],"revision":"34f187a3f25e914ec571f42d8ec52d67b6db8ce50a9d4ac92ee1ed0d7943e680","sources":[{"modifiedAt":1794031226885,"name":"CNA: WPScan","retrievedAt":1794031726573,"url":"https://www.cve.org/CVERecord?id=CVE-2026-121491"}],"ssvc":null,"status":"published","title":"Fiber Admin 3.1.0 - 4.0.0 - Unauthenticated RCE via Host Header","updatedAt":1794031726573}