Skip to content

CVE-2026-58480

CVE

Threat entity extracted from intelligence sources

Frequency
2
occurrences
First Seen
July 9, 2026
Last Seen
July 9, 2026
API
Exploited in Wild
Ransomware Use
Public Exploits
Attack Vector

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

A critical vulnerability, CVE-2026-58480, has been identified in the Blocksy Companion Pro plugin for WordPress versions prior to 2.1.47. This unauthenticated arbitrary file upload vulnerability allows attackers to upload executable files by bypassing extension validation through the Advanced Review...

Public Exploits

Checking GitHub for proof-of-concept code…