Skip to content

CVE-2026-110469

CVE

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
November 9, 2026
Last Seen
November 9, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Unauthenticated File Upload Vulnerabilities Disclosed in WidzialniCMS and WordPress Plugin78.0

Two critical vulnerabilities have been disclosed affecting WidzialniCMS and the WordPress plugin Contact Form 7. CVE-2026-114432 in Contact Form 7 allows unauthenticated file uploads leading to remote code execution (RCE) for versions prior to 6.2.4. CVE-2026-110468 and CVE-2026-110469 in WidzialniC...

Public Exploits

Checking GitHub for proof-of-concept code…

CVE Details

Related Entities

CVE-2026-110468CVE-2026-112204CVE-2026-112205CWE-287 - Improper AuthenticationCWE-434 - Unrestricted Upload Of File With Dangerous TypeCWE-79 - Cross-site Scripting (xss)XSS